We have a set of customers whose records (anything linked to the account) should only be accessible by users who are security cleared. We plan to implement Business units to separate the users but users who are security cleared can also be the owners of records for customers who don't need security clearance. This means we can't solely use record ownership to control access so looking into assigning records to Business units.
How does assigning records to business units work? If you assign an account to a BU can all linked records e.g. cases automatically move to that BU or does it need to be done on a per table level?