are the permissions defined on the department for all managers or only specific managers?