We are an agency that builds and hosts WP sites for clients but we are trying to figure out how the site owners can only update the URE plugin without having the ability to deactivate/delete the plugin it or access the settings.
If you pre-install URE to the site, input the license key or add it to WordPress configuration via PHP constant, like below:
// User Role Editor Pro License Code
define('URE_LICENSE_KEY', '5ae21 ... a75de');
and use has permissions to update plugins (update_plugins), there is not need to have access to URE settings. Such user will can install URE updates via ‘Dashboard->UPdates’ with any other plugin update together.