Secure boot can’t be disabled without administrator password to BIOS (my system allows for User and admin access, I assume this is the same for all systems).
I have found examples to reset admin BIOS access by changing the system date to ‘special’ values, and then using Alt-r when prompted for BIOS password, to provide a recovery password, however when I reset the date I’m unable to access this recovery pathway.