Enforce permission by defining the department entitled for access.