Best Practices - Users updating DB record based on their credentials: How would you do it?

[JC_Saintonge]

I wasn't sure what label to use, sorry if this is in the wrong spot!

In essence, all I want is users to be able to update a 'profile' of sorts - we have a database, there is one entry per user.  Every year they fill out a basic form and upload a file.  We'd like them to be able to see their latest entry, and to be able to make modifications to certain fields as needed, and to require certain fields be updated annually.

If it sounds like every user profile experience on every website on the internet for the past 30 years, you're not wrong.  We've tried various methods over the years, even seriously considered just making a dedicated WordPress webpage and have users enter the information in customized profile fields and then pull data from that.  We've been playing with Power Apps, but it feels like we're reinventing the wheel.

It's a common enough use scenario I'd have thought there'd be something in the Microsoft 365 enterprise suite that would provide this capability out of the box, especially in Sharepoint and now the Power suite, but I haven't come across it;    Maybe I'm just using the wrong search terms?  Please, enlighten me if so!  If not...

If you were looking to collect and allow modification to previously collected data from authenticated users via a desktop webpage interface, how would you do it?

Requriements:

1. No app installation.  It needs to work on an old-school desktop computer.
2. Permissions per user restrict access to only "their" database record
3. Ability to attach/upload a pdf file to the record.
4. Logging of changes.
5. Direct link with no navigation requred after authentication.
6. Brain-dead-simple intuitive interface
7. Basic data validation
8. Minimal user license requirements - we have users that only use these credentials to authenticate, i.e. no Outlook/OneDrive provisioned.  (But I'm open to hear about solutions involving those if there are any)

Bonus points :

1. Once annually we require a new pdf be uploaded and specific fields updated.  If there was a way to have those fields 'required' when the previous entry is over a year old, that would be joyous.
2. Interface with Exchange to update existing mailer lists and global address book; automatic removal of 'exprired' (>1yr) data
3. Auto send e-mail confirmation of changes to both user and manager
4. e-mail reminders 

Super bonus points:

•  Flag fields containng (external) email addresses that have bounced/RTS and force users to update that field
• embed into public facing webage / seamless redirect on form submission.
• graphic dashboard for managers to pull up responses, see expiration, etc.

I appreciate you taking the time to read this and would be grateful for any thoughts, feedback, or resources.  

Thank you!