I have noticed that a CRM user can see all emails of people belonging to his same business unit. Where does this behavior come from? I didn't find the Email entity in the Security roles privileges definition, that looks very strange to me.
Email is an activity, so this share the same privilege set as other activities like Task, Appointment, Fax, etc.