I have noticed that I can not specify a context for Patch Management Rights under Roles. The Patch Management Rights automatically get the Zone context. How can I assign local administrators the right to only deploy patches to managed devices located in their own context ?

Thanks !