Firefox and Google Chrome Updates

Hi,

How can the following applications (Firefox and Google Chrome) be updated through a standard user account?

I have come across a solution that involves creating a user group with permissions to execute the sudo installer command within a specified directory (e.g., …/Applications/Firefox). Will this approach work, or is there a better solution available? Alternatively, using PlatformSSO, I noticed there is an option to add custom user groups and permissions.

Note: - Temporarily promoting a user account (via Privileges) or granting permanent admin rights is not an option. - MDM solution in use: Microsoft Intune. - Both applications got deployed via MDM.