Managing roles - a role needs to be able to assign roles to users at lower business units

Hi,

We are trying to setup a security role which is required to be able to assign the roles to the users at lower business units. I was getting different types of privilege errors such as prvDeleteWorkflowSession, prvAssignConvertRule, prvWritemsdyn_PostAlbum, prvCreateWorkflow, prvReadMailbox and I kept getting errors.

I tried addressing each privilege error however the errors kept appearing.

Which settings - privilege and level of access should I use?