you wouldn't link the user to department, but department to its users