Is there a way we could configure CUCM 11.x admin access so that helpdesk admins are only able to check “home cluster” box on the CUCM end user management page? I have been playing with access control groups and roles but haven’t been able to figure this out so any assistance would be much appreciated.
If this is not possible what is the most restrictive custom access can we create for help desk admin which includes the ability to check “home cluster” box?
Not possible in any way, you give access to the whole page/settings, that's as granular as CUCM permissions can go. No way to limit to some settings within a page, or some elements (some phones for example)
You'd need PCP or a 3rd party app to do that.
Look at the Standard CCM User Management role as an example, and then fine tune it to your needs.