for the life of me cant figure out which setting this is, allow cross subsidiary record viewing on the role is checked off