Inside of Recast Roles, add the options for the Patching panel under Permissions, the same way Privileged Access, Administration, etc are. The ability to lock this down for tiers of users is required of some environments.

Remove the version number from the name of applications. Applications like the Omnissa Horizon Client include the version number. Meaning that because the title is unique to a specific version of the application, the deployment of that application...