CUCM End User Administration

Question

Our Helpdesk staff performs the basic functions of add/remove phones and add/remove users from CUCM.  We've just upgraded from CM 4.2 to CUCM 8.5(1).  We are using the integrated CUCM LDAP and not AD integration.  My Helpdesk users are able to use the User/Phone Add option to create a new phone and a new CUCM End User.  They are able to edit all the necessary properties of the phone and line settings.  But with their current group/role memberships they are unable to change attributes of users or to be able to delete them.  The only Role I can see to add them to that allows changes to End Users is Standard CCMADMIN Administration and the only User Group is Standard CCM Super Users.  Both of those give far more rights than I would like Helpdesk staff to have.  Am I missing something obvious to allow them to perform End User management?  Has anyone else encountered this?  Below are the groups/roles my Helpdesk staff are currently part of.  Any help would be apprecitated.
Bryan
I've added the users on our Helpdesk to the following Groups:
Standard CCM Admin Users
Standard CCM End Users
Standard CCM Phone Administration
Standard CTI Enabled
Standard RealtimeAndTraceCollection
Which automatically adds them to the following Roles:
Standard CCM Admin Users
Stadard CCM End Users
Standard CCM Phone Management
Standard CCMADMIN Read Only
Standard CCMUSER Administration
Standard CTI Enabled
Standard CUReporting
Standard RealtimeAndTraceCollection

Answer 1

Bryan,
If I remember correctly, there isn't a pre-canned role that will allow for End User administration. I don't know why.
Your best bet is to create a custom Role and User Group. This way, you can give your Helpdesk exactly the access they need. The descriptions for the Role permissions are pretty self-explanatory, so it should be pretty easy to accomplish.
Steps:
1) create new role
2) assign permissions to the new role
3) create a new User Group
4) assign the new Role to the new User Group
5) assign the new User Group to the End/Application User accounts for the helpdesk.
This maybe helpful: http://www.cisco.com/en/US/partner/docs/voice_ip_comm/cucm/admin/8_5_1/ccmsys/a02mla.html#wp1062944
HTH
Adam