In a corporate environment, a company implements a Role-Based Access Control (RBAC) system to manage user permissions across various applications. The company has three roles: Admin, Manager, and Employee. Each role has specific permissions assigned to it. The Admin role can create, read, update, and delete records, the Manager role can read and update records, and the Employee role can only read records. If a new application is introduced that requires a user to have the ability to delete records, which of the following scenarios best describes how the company should handle access for a user who is currently assigned the Manager role?