While configuring a MU using an LDAP query, and the query is not formatted in single continuous line, you may notice that the delegation of permissions fails. Meaning, some of the referenced OUs, do not inherit the permissions delegate to the MU.
This is a product defect (TF00703664).
Make sure that the MU's LDAP query is configured in a single continuous line (no additional lines).
This will be fixed on a future release of the product. If you require this immediately corrected, please contact support for a hotfix referencing the defect ID TF00703664.