I am trying to research the best practice for managing the security in the Production zone workflow server.

What I want to do is give each agency administrator the ability to manage and run their specific workflows without impacting those of other agencies.  What I have seen is that granting workflow specific Full permissions + search general permissions does not give the administrator the ability to execute the workflow in the workflow designer.

What combination of general permissions and workflow specific permissions are required to allow the user to execute a specific workflow from within workflow designer.