= TMS permissions are assigned to groups, and users are added to the groups. This is because TMS uses a role-based access control model, where different groups have different levels of access and privileges to the TMS functions and resources. Users can belong to one or more groups, and inherit the permissions of those groups. TMS provides some predefined groups, such as Administrators, Booking, Users, and Read Only, and also allows creating custom groups with specific permissions1.
The other options are not correct because:
* TMS permissions are directly assigned to individual users: This is not true, as TMS does not allow assigning permissions to individual users. Users can only have permissions through the groups they belong to1.
* TMS permissions can be imported from the Expressway or Cisco Unified Communications Manager:
This is not true, as TMS does not support importing permissions from other systems. TMS permissions are configured and managed within the TMS application1.
* TMS permissions are configured in Active Directory, which is then synched to TMS: This is partially true, as TMS can integrate with Active Directory to authenticate users and import user accounts and groups. However, the permissions are not configured in Active Directory, but in TMS. The Active Directory groups are mapped to the TMS groups, and the permissions are applied accordingly2.
References := 1: Cisco TelePresence Management Suite Administrator Guide (15.16) - User Administration
[Cisco TelePresence Management Suite] - Cisco 2: Cisco TelePresence Management Suite Administrator Guide (15.16) - Active Directory Integration [Cisco TelePresence Management Suite] - Cisco