How do you ensure that only a manager can run a specific flow action?

Add a pre-processing activity to the flow action form to determine whether the user is a manager.

Add a privilege to the flow action form, then add the privilege to a role assigned to the access group for managers.

Add an Access When condition to the flow action to determine whether the user is a manager.

Add a validate rule to the flow action form to determine whether the user is a manager.