Yes, for workflows you can refer this page - https://experienceleague.adobe.com/docs/experience-manager-65/content/implementing/developing/extending-aem/extending-workflows/workflows-program-interaction.html?lang=en For user permissions, we typically perform them through UI and then use ACL packager...