Hi,
I'm trying to create a web console only for sending SMS using adaxes 2018.2. The SMS-users that are going to use the console should only be able to view users, not edit them. The user accounts (who should receive SMS) are spread across a huge number of OUs, and because of that I have created a business unit to collect them.
I have created a security role for the web console, and delegated rights to the users. In the permissions I have tried initially to give only the read-permissions for Business Units and Users.
In Assignments I have assigned a security group (which the SMS-users are a member of) to the Business Units I have created, plus all the OUs that the users are coming from. I have tried ticking off only "members of the Business Unit", and both as showed below

I have also tried giving the users full access to all permissions , as I cannot understand why the SMS-users cannot view the Business Units that I have delagated permissions to.

In web configuration, I have ticked off "Display the Business units node" in Navigation

The SMS-users cannot view any business units in either the Adaxes Administration Console (GUI), or the Web Console. This is what it looks like for a user with the permissions mentioned over:

What am I doing wrong?
The only thing I can think of is that the SMS-users security group also is a member of the Blind User Security Role, which removes a lot of OUs that the users should not see or be able to browse to.