The basic set up for managing Workflow Profiles is that the user must have Application User Interface: WorkflowProfilesPage. Then if you give the user the Application Security Role ManageWorkflowProfiles, they have access to manage all Workflow Profiles. If the user does not have that permission, the user's access to the Maintenance Group on each Workflow Profile is evaluated. That's it.
A couple of things to bear in mind outside of the Manage Workflows area. Application Security Role ManageWorkflowProfiles gives the user permission to clear stage data as well i.e. they can click Load and Import and clear the data. They will need additional security for the Transformation Rules though.
Secondly check if you are using the function GetCubeRootInfo anywhere in Business Rules. The user must have maintenance access to the cube root workflow profile for that to work. Workaround is to query the database directly to get the info.
