When sharing an application it would be ideal to be able to select the business unit the user belongs before selecting a security role.

When main reason for this is because if there are lots of business units in an environment especially where users cant share data, after sharing the app, you have to go and find the user in the environment, change the business unit and then add the security roles back on.