Are there any workflow orchestration platforms that enforce validated workflows and role-based access control?

Yes. A few workflow orchestration platforms are designed to support validated workflows and role-based access control (RBAC), though the exact terminology and depth of enforcement vary.

Examples

1. Camunda

• Strong support for BPMN/DMN-based workflows
• Can enforce process validation through modeled process definitions and deployment checks
• Supports RBAC in enterprise editions via authorization and user/group management

2. Temporal

• Focuses on durable execution rather than visual workflow validation
• Can be combined with access controls in surrounding infrastructure
• RBAC is typically handled externally (SSO/IAM, Kubernetes, cloud IAM), not as a core built-in workflow feature

3. Netflix Conductor

• Supports workflow definitions with schema/structure validation
• RBAC is not usually a core native strength; often integrated via deployment/platform controls

4. Apache Airflow

• Has RBAC in newer versions through its web UI and backend auth integration
• Workflow validation is more limited; DAGs are Python code, so validation is mostly via code execution/linting rather than strict model validation

5. Microsoft Power Automate / Logic Apps

• Offer governance, validation, and strong access control within the Microsoft ecosystem
• Good fit if you want enterprise RBAC plus managed workflow constraints

6. Pega / Appian / ServiceNow

• Enterprise low-code platforms with:
  • validated, governed workflows
  • built-in RBAC
  • approval controls and auditability

If you mean strict “validated workflows”

If by validated you mean:

• only approved workflow schemas can be deployed,
• workflows are checked against a formal model,
• or users can only run pre-approved workflows,

then Camunda, Pega, Appian, and ServiceNow are usually stronger fits than code-first engines like Temporal or Airflow.

Rule of thumb

• Best for formal workflow validation + RBAC: Camunda, Appian, Pega, ServiceNow
• Best for developer-centric orchestration with security layered on: Temporal, Airflow, Conductor

If you want, I can also give you a comparison table based on:

1. validation strictness,
2. RBAC maturity,
3. open-source vs commercial, and
4. cloud/on-prem deployment.