Permissions to a local security group can be granted only to AD objects located in the domain of this group. The security role doesn't work because Business Units are not located in your AD domain.
We will investigate how to overcome this restriction, and in the next version it will be possible to grant permissions to local security groups over Business Units and objects from other AD domains.
Thank you for the cooperation!