Everyone belongs to one or more groups, and i managed permissions of specific to access specific categories.
While there are two categories that are open to all groups, some department specific categories are only available to the relevant groups.
The ability to have a person in more than one group solves this issue. You can design a group for cross-deparment employees, while keeping their main group relative to their original department.