A system administrator needs to grant additional privileges to a single Cisco Unified Communications Manager user. How should the administrator accomplish this task?

CUCM does not permit roles to be directly assigned to individual user accounts; privilege escalation must occur through Access Control Group membership.

In CUCM, users are not added to roles; roles are assigned to Access Control Groups, and users gain privileges through their ACG membership.

CUCM enforces a role-based access model where Roles - containing specific resource and privilege definitions - are assigned to Access Control Groups; assigning an ACG to a new role links those privileges to all users who are members of that ACG, which is the architecturally correct method for extending privileges. This ACG-to-role binding is the required mechanism in CUCM because the platform does not support direct role assignment to individual user accounts.

Adding a user to a new, empty Access Control Group confers no additional privileges unless that ACG already has appropriate roles assigned to it.