We have several roles defined, one is called "Local IT coordinator" and people with this role can edit computers for their own organisational unit.
We also have central IT-coordinators, who are responsible for all units. We copied the Local IT-coordinator role and renamed it to "Central IT-coordinator". We are now looking for the way to grant the central IT-coordinator role edit permissions for ALL computers. But we can't find where the restriction has been made that this role can only edit computers in a user's own unit.