RE: SuiteApproval Edit Permission
Since workflows included in the Suite Approval cannot be edited, you need to make a copy of the workflow and add the roles in the exception in the condition for the Lock Record action of the workflow and use that new renamed workflow for the process (deactivate the original one)
I just created a new copy from the original but it doesn’t work. it seems that this validation is hardcoded in this script SAS Supported Records UE
Did you ever figure out how to get around this? We are having the same issue and in testing I’ve narrowed it down to that script as well. It’s locked so I can’t see what the script is doing.