Need to apply a role to users that allows for installation/updating of apps on Azure connected PC
You can control which users are granted local admin rights on a machine that has been Azure AD domain joined. You can find details on how to do this here