Hello
I just did this for a client.
You will need to create new ACLs for another role outside of Admin and Delegated developer in order for them to create and edit an update set. Attach the role you want to those new ACLs.
I would create a new role to manage who can create update sets, something like update_set_user. That way, you don't open it to everyone with ITIL or Catalog Admin role.
The ACLs I created - create, read, and write on sys_update_set table.
read on sys_remote_update_set table and sys_update_xml table.
if you want them to access the update set through the Update picker, you will need to follow the steps mentioned above.
If you want them only to see the update sets they create, you will need to create an on before business rule query - here is a post that explains how to do that here.
Hope that helps!
