The only way today to allow user to make a full discover Now (On systems / users / groups) is to add Site ==> Modification right on a security roles.
But it's too much for us on access to delegate, we don't want theses user can remove a role on a server for example.
Usage example, Helpdesk will have user who don't find a software, helpdesk will add user in group, but must wait for the auto delta. He can't go to make a new full discover Now for groups (For an example). And explain we have to wait 5 minutes before groups seen new user is hard...user doesn't want to wait.
Best regards