For users to download and install HotFixes, they must have the Download permission. By default, the Download permission is allowed for the everyone group. This setting does not generally need to be changed.

If the Download permission is not granted to a user, that user can continue to use the Integrity Lifecycle Manager client but cannot update their client with an available HotFix.