I've created a multisite for a local charitable organization that contains five sub-clinics inside it. I have various plugins running (security, SEO, etc.) in the multisite activated "across the network".
I'd like to grant permissions for a user at this organization to check for updates every two days and apply any updates that come up. I don't necessarily want this user to have permissions to do anything else.
Is there a user level or a way to homebrew a user level that allows them to (a) log into the backend, (b) look for updates, and (c) update the multisite without giving them other authorial or editing permissions?