Thanks to Rowan, I finally figured out how to let dept admins create
user's in their deptarments via the User App.

The next requirement I have been given, is that these dept admins need
to be able to reset the password for the folks in their dept.

Assigning the LDAP permissions is a snap and that is not what I am
worried about.

I just cant seen to find an option to reset another user's password.
No place in the PasswordChangePortlet. Nor have I seen a place to add
the password as a field to optionally add when editing a user.

Hopefully I am just missing something, which could very easily be the
case.