Each Agent has a primary department. Any additional department(s) that they have access to would be "extended access".
I imagine that you would manage the departments any time you had a change to make (shutting accounts down, adding new accounts, or changes in access).