Bios Update by user with password protected Intune deploy

Hi All

we are having several devices with autopilot enrolled.

I have also deployed dcu to the devices and set a fixed pwd on the bios of the laptops.

Users are not an admin. 

But how can the install a bios update? Because you need a bios password for that.

How can we arrange that users can install this themselfs?