RE: Duplicate Detection Job Permission
I'm using on-prem 2016 8.2. and I think I found a work around for this issue, Its not pretty but it seems to be working. I created a separate security role inside CRM and named it Detect Duplicates Rule, then just assigned the role to the user who needs access to merge account.
Settings -> Security -> Security roles - New.
On your details page, just name it Detect Duplicates Rule and place it in what ever business unit you need too.
Click "Core Records" (You will only be working in the core records page) and grant organizational access for each field in Duplicate Detection Rule (so 8 green dots across the board). Scroll down and also grant access to all 3 web wizard references (4 green dots on each line). Then also grant access to "Publish Duplicate Detection Rules" (1 green dot) save and close.
Then select your user whom needs access, click manage roles, and you should see the check box available for Detect Duplicates Rule. Check box and save.
Now the user can run there own jobs and there is a record of the user running the job. The actual task of merging duplicates is very tedious and the user has to do a lot of clicking, but it saves you the headache of having to do it yourself. Plus, if you need to quickly add/remove access, you just check one box.
Hope this helps