Enforce permission by defining the department(s) entitled for access.