Add create workflow permission and add relevant canCreate to WorkflowDefinition