With Dynamics CRM 2011 a new option was introduced on the security profiles that transforms the way we can use the email router. The new change I'm referring to is the queue security options, it has now the ability to read at different levels:
- Business Unit
- Parent-child Business unit
The following diagrams illustrates how the concept works. First consider the following business unit layout:
We have a parent business unit with 4 child business units. Each child business unit represent the company office locations. Each city business unit will hold their own CRM users, security roles etc.
Below a more detailed diagram on how the different email routers would be placed and how many service accounts we would require in order to scale the email router:
The Service account requires Queue and User Settings Read permission at the business unit level.
The service account is configured on the email router configuration tool, deployment tab, deployment profile:
Hope this was helpful.