Before macOS 12.3, upgrades and updates were different, and only admin users could authenticate the installation of an upgrade to macOS. Now even standard users can, as explained here.
Secure Token
To boot from an external disk, Apple silicon Macs need them to have an Owner. Here’s how to investigate ownership, and how it works.
The Eclectic Light Company 