Restrict permissions for workflows (enrolling contacts in workflows)
Unfortunately, you cannot define this from the permission or user point of view. They can access and edit everything if you give them access to edit workflow. Unless, each workflow (assets in general in HubSpot), are assigned to a specific team. One way to address the above issue would be. 1. Defining a team of "super/automation users" within HubSpot. 2. Only assign a few users within HubSpot under that team, assuming you want to give them access to all workflow. 3. Assign all the workflows to that team.
Now only users under that team can access or edit the workflow. If you give access to the workflow to other users from the different teams, they would not be able to access the workflow that belongs to "super/automation users"