Hi everyone

The title says it pretty much all.
I want to delegate the task to update our 2000+ workstations from 10.3.1 to 10.3.3 through System Updates. However, I don't want to give Super Admin rights.
What else can I do here so I grant only a minimum of required rights?

Thanks in advance