Oath workflow permission

Hi
I could not find this in the docs. What are the permissions for workflow please? What can the other party do or see if I give them workflow permission with oath?