You can give the view roles on processes and jobs…so that the end user can run the bots on the configured run time machine…and the runtime machine can be configured as the end user machine itself…which gives access to run the bots from orchestrator and also as their machine is used as runtime the bots would run on the target user machine
Cheers