Managed User Account BUT Can Install Certain Apps?

Is there a way to setup a Managed User so they can only update applications x, y, & z or do they always require an Admin username/password?

The scenario would be one of a small business where only a few applications need updated on a regular basis, however the business doesn't have an IT department to set anything up (e.g. Remote Desktop, OS X Server, etc.) so it would be benficial if the end-user could update these applications themselves, but without an Admin password so they can't change anything else.

I'm assuming it's impossible, but I'm hoping I'm wrong.

Thanks!