We separate the Windows patches based on whether they are approved or not. We generate a filter on the site for the patches and then export the result and import it into a custom site. This way, we send the approved patches via baseline.
I am being asked to see the totality of patches owed by the servers and add a column indicating whether they are approved or not (this approval can be compared with the name or other attributes of the custom site).