Inside of Recast Roles, add the options for the Patching panel under Permissions, the same way Privileged Access, Administration, etc are. The ability to lock this down for tiers of users is required of some environments.