My guess is that this question comes from a need to allow non-admins to change marketing-style on-hold music from time to time? I'm not sure I would want to give users full system access just for this purpose.
We handled a similar situation where a customer wanted specific people to be able to update the prompt on a "job-line" IVR on a daily basis. We gave them a simple web page where they could upload the file, then we modified the IVR via the 3CX API. You could do something similar.