--- title: Set up a flow with external trigger definition description: Set up a flow that responds to an event-driven external trigger from a third-party system and executes. locale: en-US release: australia topic_type: task last_updated: "2026-03-12" reading_time_minutes: 2 --- # Set up a flow with external trigger definition Set up a flow that responds to an event-driven external trigger from a third-party system and executes. ## Before you begin Role required: flow\_designer Subscription required: Integration Hub Enterprise pack ## Procedure 1. Navigate to **All** > **Process Automation** > **Flow Designer**. 2. Select **Create New** > **Flow**. \[Omitted image "create-flow.png"\] Alt text: Create Flow button. 3. Fill out the **Flow properties** form.
| Field | Description |
|---|---|
| Name | Name to uniquely identify your flow. The system creates the internal name of the flow from this name. |
| Description | Description of your flow. |
| Application | Application scope to create your flow in. Global is the default. |
| Protection | Specify if the flow is read-only. **Note:** This is an optional field with two values: None and Read-only. Choose read-only if the flow is within an application scope that you own. |
| Run as | Option to specify the user that runs the flow. You can select the system user or the user who initiates the session. Select the user who initiates the session option when updates should come from the user who triggered the flow. For example, use this option when you want the incident record comments to come from the user who started the flow. Settings for the Run as option in a flow don't apply to child subflows. **Note:** By default, flows run as the user who initiates the session. To create a flow that can run with a personal OAuth token, select the user who initiates the session option. If the user who is running the flow has a personal OAuth token, the flow runs with that token. For more information about creating a personal OAuth token, see [OAuth 2.0 credentials](https://raw.githubusercontent.com/ServiceNow/ServiceNowDocs/australia/markdown/platform-security/oauth-2-credentials.md). When flows run as the user who initiates the session, the system limits flow actions by user Access Control Rule \(ACL\) restrictions. Ensure that security restrictions don't prevent users who trigger the flow from performing flow actions. Flows run by the initiating user also respect user-specific settings such as date/time formats. **Note:** Inbound email flows ignore this setting and always run as the user who initiates the session. To test access controls for an inbound email flow, impersonate a typical inbound email user and manually trigger the flow. |
| Run with roles | Roles that the flow runs with. This option is only available when **Run as** is set to **user who initiates the session**. |