Security Role Privilege to Change Business Unit in MS CRM:

There’s a strong possibility that an Administrator working with an implementation using a complex business unit structure would want to include that structure in a solution to be exported as a managed or unmanaged solution. This would allow them to make changes to the business unit structure in their DEV environment, and then import those changes into the production environment after they’ve been tested, just like they would a change to a script, a plugin, an entity configuration, or a security role. However, BUs are not one of the items that can be added to a solution.

Let’s say User1 who wants to change the BU of User2 who is under same BU or different BU, User1 should have minimal Organization level privilege on below entities and can be configured by selecting 

CRM Application à Settings à Administration à Security Roles à Open the corresponding Security Role  à Give below privileges for ‘System Job” in “Customization” tab, Calender in “Service Management” tab and other below entities privileges in “Core Records” tab

1. System Job – Append , Create, Delete, Share
2. Calender – Read, Write
3. Follow – Append , Create
4. Email Template – Assign , Share
5. Customer Relationship – Delete
6. Executable Workflow Jobs in “Miscellaneous Privileges” section in the “Customization” tab

The below screen shots show the security role privileges highlighted in red.

Cheers,

Arun