A new Azure Active Directory administration role is available – called Windows update deployment administrator – to delegate Windows Updates deployments through Windows Update for Business.

This role allows you to delegate Windows Update for Business settings like when and how updates are deployed to devices.

This will help you delegate Windows Update for Business without granting more permissions as it used to be before this new role.