Atera should implement a two step patch process.
Step one: Discovery where Atera compares the patches on an endpoint with the most recent patches available then let's us choose whether to install the patches or not.
Step two: Atera Installs approved patches and ignores unapproved or "ignored" patches. Unapproved should show up on the list again and ignored patches should nbot show up on the list, but be available to approve at a later date.
Typically, we let our patches lag for a month (especially on servers) so they can be out in the wild and fail on other people's computers (we monitor patch management message boards) then when we patch, we ignore the bad patches. This saves a TON of headaches and a ton of time.