The simplest and most horrifying method is to give the users a UID of 0. That's the key. The slightly less horrifying method is to limit access to the su(1M) via a specific group that is assigned to the binary and those users also share. Finally, you might consider the sudo utility.