You can remediate virtual machines and hosts using either user-initiated remediation or scheduled remediation at a time that is convenient for you.
If your vCenter Server is connected to other vCenter Server systems by a common vCenter Single Sign-On domain, you can remediate only the inventory objects managed by the vCenter Server system with which Update Manager is registered.
To remediate vSphere objects, you need the Remediate to Apply Patches, Extensions, and Upgrades privilege. For more information about managing users, groups, roles, and permissions, see the vCenter Server and Host Management. For a list of Update Manager privileges and their descriptions, see Update Manager Privileges.