A customer has requested that all employees have "Standard CTI Enabled" and "Standard CCM End User" roles. How would these be assigned prior to being applied to their accounts?

A Default Device Profile defines default phone settings and features for users who do not have a physical device assigned, not a mechanism for assigning security roles.

A Credential Policy controls password and PIN complexity, expiration, and lockout rules for user authentication, not role-based permissions.

A User Profile in CUCM is used to define self-provisioning settings and default device associations, not to pre-configure or bundle security roles.

An Access Control Group (ACG) in CUCM is a container that holds one or more roles, such as 'Standard CTI Enabled' and 'Standard CCM End User'. Administrators add the desired roles to the ACG first, then associate the ACG with individual end user accounts, enabling scalable and consistent role assignment across multiple users.