An engineer must perform a Cisco ACI fabric upgrade that minimizes the impact on user traffic and allows only permitted users to perform an upgrade. Which two configuration steps should be taken to…

Dividing APIC controllers into maintenance groups is crucial for APIC availability during an upgrade but does not directly address minimizing impact on user traffic, which primarily flows through the data plane switches.

The tenant-ext-admin role is a tenant-level role and does not possess the necessary fabric-level privileges required to perform a Cisco ACI fabric upgrade.

Combining all switches into a single upgrade group would lead to all switches being upgraded simultaneously, causing significant disruption and maximum impact on user traffic, which violates the requirement to minimize impact.

Dividing switches into two or more maintenance groups allows for a rolling upgrade process, ensuring that not all switches are taken offline simultaneously, which significantly minimizes the impact on user traffic.

The fabric administrator role provides the necessary permissions to manage and perform upgrades across the entire Cisco ACI fabric, satisfying the requirement that only permitted users can initiate the upgrade process.