look at the role - there's a tab called restrictions. You can restrict a user to their department and children - which would probably cause other issues