Access rights management

Hi,

i just need to implementation CRM Online, i have created business unit, add user in business unit , assign specific role to user like sale manger.

pls guide further what could be structure of access rights management.  as we have organizational structure like business unit, each BU manage by head and has sales team. how to make one person as business unit head.

Thanks.