---
sourceDocument: Australia Security Management
sourceDocumentLink: https://servicenow-prod.fluidtopics.net/r/security-management

 Release :

    - australia

ft:locale :

    - en-US

ft:publication_title :

    - Australia Security Management

ft:clusterId :

    - security

bundleId :

    - security

workflow :

    - Technology


---

# Customize SI to MSI flows (optional)

# Customize SI to MSI flows (optional) {#ariaid-title1}

* Release version: Australia
* 
* Updated August 3, 2026
* 
* ![](https://www.servicenow.com/docs/portal-asset/ico-clock) 1 minute to read

Copy and customize the SI to MSI promotion flows to control how File Explorer and chat channels are configured when a Security incident is promoted to a Major Security Incident.

## Before you begin

Role required: sn_msi.workspace_admin{#customize-si-to-msi-flows-for-msim__customize-si-to-msi-flows-for-msim-prereq-1}  
Note:  
You can't edit delivered flows directly. Copy the flow and edit the copy to preserve the original delivered flow.

## About this task

Two Flow Designer flows control component setup when a security incident is promoted to a major security incident:{#customize-si-to-msi-flows-for-msim__customize-si-to-msi-flows-for-msim-context-1}

* SI to MSI Promotion (SharePoint) sets up the File Explorer component by calling the Create Folder Structure subflow, which builds the folder hierarchy per the [Create Folder Templates](https://servicenow-prod.fluidtopics.net/g7WW_gtrBRjUbqWISCwT2g "Use Folder Templates to automatically create unique folders for different Major Security Incident types. The folder templates within the File Explorer Component are used to create a base folder structure for the security incident in the Microsoft SharePoint.") configuration.
* SI to MSI Promotion (Teams) sets up the Chat component by calling the Chat Team and Channels Creation subflow, which builds the team and channels per the [Create a chat channel template](https://servicenow-prod.fluidtopics.net/D1uHJ2XS4z_eX8vmAtf7pQ "Configure Chat Teams and Channel Templates to create chat teams and channels to collaborate, track the chat conversations, and add users and user groups to those Chat Channels. These Channel templates are created in the Microsoft Teams when a major security incident is promoted.") configuration.

{#customize-si-to-msi-flows-for-msim__ul_flow_role_khg}

Both flows are active by default. Use this procedure only if you need to customize how these components are configured during promotion.{#customize-si-to-msi-flows-for-msim__customize-si-to-msi-flows-for-msim-context-2}

## Procedure

1. In the [ServiceNow AI Platform](https://www.servicenow.com/docs/access?context=now-platform-landing&version=australia&pubname=australia-now-platform&ft:locale=en-US), navigate to Flow Designer.
2. Search for the SI to MSI Promotion (SharePoint) flow.
3. Open the flow and select Copy from the flow actions.
4. In the Name field, enter a name for the copied flow.
5. Select Save.
6. Make your customizations to the flow.  
   For example, modify the folder structure or add additional actions.
7. Select Activate.
8. Verify that the flow status shows Active and the flow trigger is set to Major security incident Created or Updated where MSI candidate state is Accepted.
9. Repeat steps 2 through 8 for the SI to MSI Promotion (Teams) flow.
{#customize-si-to-msi-flows-for-msim__steps_og4_mtw_ckc}

## Result

Confirm your customized flow is in the Active state before configuring notification preferences.
**Related concepts**   

* [Configure File Explorer Component](https://servicenow-prod.fluidtopics.net/Kk_inFGA_OlyIpY2kUMrJA "The File Explorer workspace component organizes and tracks the collection of artifacts (files) related to a major security incident. It is designed to support integration with any third-party file hosting provider such as Microsoft SharePoint in the Major Security Incident Management workspace.")
* [Configure Microsoft Teams](https://servicenow-prod.fluidtopics.net/aSGHATgX3Q6joDp2QIfLaQ "Configure Major Security Incident Management with Microsoft Teams which helps communication over the chat to resolve Major Security Incident.")
* [Configure Slack chat connector for major security incidents](https://servicenow-prod.fluidtopics.net/NptgsoqiRvL62tEN7nXrEw "Integrate and collaborate with Slack to resolve Major Security Incident to view and filter collaboration chat activities.")