Cisco Unified Communications Manager Administration uses roles and user groups provides varying levels of privilege (access).
This technique permits granting only the required privileges for a selected group of users and limits the configuration functions that users in a particular user group can perform
The access log contains a file report of access/change attempts. That is, Cisco Unified Communications Manager Administration generates a record of attempts to access or modify any directory or database component through Cisco Unified Communications Manager Administration. The change record includes the user name, date, time, window from which the change was made, and the success or failure status of the update.
Take a look at the following document link for detail information on roles and groups:-
http://www.cisco.com/en/US/docs/voice_ip_comm/cucm/admin/6_1_1/ccmsys/a02mla.html
HTH
Allan.
Pls rate helpful posts. Thanks.