Ideas - Click Marketing Automation for D365

Click dimension only have 1 service account, which then needs to be created on top level Business unit to work for all business units in one CRM instance.

The problem with this is that it needs to have access to all contacts in the CRM instance to operate and send out emails.

The problem with this is that it doesn't comply with the security model inside CRM when doing email sends. Even if a specific business unit have created a marketing list that is owned by a child business unit and the email send is owned by the child business unit, then click dimension send still send out emails to contacts potential other business units as is set on the top level business unit.
This makes the system insecure, and even though the CRM administrator has secure local child business units to only see the data they are allowed to see, click dimension service account has access to all, and can therefore send emails to all.

We have seen this problem several times, and as we see it it could be fixed by doing a small change to Click Dimension. The email send execution should not happen as the CD service account, but as the owner of the email send or owner of the marketing list or owner of the marketing automation.