Assigning users to to roles are done from a user's perspective

Only departments the user will have access to are listed. Roles can be added or removed per department by using the "New Role" and "Delete" buttons. When assigning a new role the user will have the option to add this role only for the selected department or all departments.