Apparently, more recent versions of CUPS do not allow by default for non-admin users to resume a printer. I'm not sure the logic behind this. Disabling? Activating? Sure. Non-admins don't need to do those things. Why shouldn't a non-admin resume a print job, though?
Apparently, I'm not the only one who's had this issue. Thanks to name and password for printer operator on computer cart and # This modifies cupsd.conf to allow a user to un-pause printers, I threw together a nopkg .plist for Munki that basically turns off the CUPS service, backs up the /etc/cups/cupsd.conf file, and then uses sed to do a find/replace to remove all the limits on resume. Hope someone else finds that helpful!