Application User#
Create an Application User on the Call Manager, follow the standard Cisco documentation.
This user will need to have permissions granted.
Create a new Access Control Group named AXL-GROUP.

Add roles to this new group.

Edit the Application User you created and assign the following groups:
AXL-GROUP
Standard CCM Server Monitoring
Standard RealtimeAndTraceCollection