How are you handling Banner users that are staff members.

Curious as to how other organizations are handling users that are none Faculty or Students.

Example case:

A department admin wants to log in and see all of the students associated with a class for a particular program(s) she is the admin for.
 * 1) Are you/can this be facilitated through the HR or another module or do you have a custom solution/modifications to exisiting modules?
 * 2) How are you handling these users permission? IE (Ensure that the logged-in admin can only see programs/classes they should see.)

Thanks!