We have a workflow that creates a subsite in SharePoint. The first challenge we had was that we couldn't see custom templates from the Create Subsite action in the workflow designer, which is annoying but not the end of the world.
The more substantial problem is setting permissions on the newly created subsite. I can set Stop Inheriting Permission and provide a relative url but the actions around granting permission all seem to act on the top level site and don't give me an option to specify the newley created site. When I try to add a user or group to a role, it does that at the top level site. Update subsite lets me change title or description, but not the permissions.
I feel like I must be missing something obvious because it can't be this difficult to change permissions on a newly created site.