This happens if the new role created has been cloned from a restricted user role. As a best practice, clone a higher role like account admin and provide restricted access for all modules. However, grant access to manage workflows alone.