...
Forms/Flows owned by designer with all access granting authoritythat can grant authorization access. Only the designer/owner may modify the form/flow design.
Flow administration may be granted to any other user/role to give full access to audit trail and ability to modify/abort running instances.
Access to a flow instance’s audit trail may be granted to all participants or a to a custom set of users/roles.
Only the designer/owner may deploy the form/flow to production. Best practice is to have a deployer account on production system that owns the form/flow.
...