Captive Portal Mode for Standard Users

For instructions in: https://support.sophos.com/support/s/article/KB-000044202?language=en_US regarding Captive Portal Mode, this solution is useless if it requires admin credentials in an organization. How can we allow this to be enabled for team members set as standard users (who are the majority/common reporters of in-flight connectivity issues)?