KACE added the task chains and the power behind them is pretty big for the ones who know how to correctly use them. I was chatting with an engineer recently and one of them provided me the list of minimum permissions that need to be in place in a role to see and run Task Chains.
Here you have them:
* Devices= READ
* Patch Management= WRITE
Update as of 11/14/2019
Some users were noting that they won't be able to see the Save, Run now, etc. I played myself a lot more and got it to work with this. Still without providing full Admin rights to the UI.