Patching to a Group of Devices

Good day,

We would like to create a role to allow for the patching of a group of devices, and for that just that group of devices only. We have created the Folder, and I have moved a server into that group (there will be more later on).

When I select create a role, in this case Patch Management Rights - Device,

I'm presented with the following,

"For 'Patch Deploy' right to work it requires that the user also has bundle rights for the 'ZPM' bundle folder."

Does that mean that I need to go to the "ZPM" folder and give that user just "bundle rights"?

Would anyone be able to shed some light on this or perhaps even provide an example of how to properly configure Patch Management Rights -Device?

Thank you,