Hello,
I see that all security roles are associated with all the Business Units in the environment.
Can you please clarify, how that works and how the relation of Security role with Business Unit impacts to Users/Data?
Thanks,

Hello,
I see that all security roles are associated with all the Business Units in the environment.
Can you please clarify, how that works and how the relation of Security role with Business Unit impacts to Users/Data?
Thanks,
Hi @dave8
This is easiest explained with an example. Lets say you have the business unit structure below. And let's say that User A is in Division A and User B is in Division B. User A is the owner of Contact #1 and #2 which means they are in Division A, User B is the owner of Contact #3 which means it is in Division B.
If User A has a security role with Business Unit level Read access on Contact. They would be able to see Contact #1 and #2 but not Contact #3. However, if they have Organisation level Read access on Contac the would be able to see all of the Contacts.
Most commonly, security roles are created for the root business unit and they propagate down to the child units. However, you can create a security role in Division A only, which Division B would not have.
I hope this helps. Take a look at this article for more information.