Roles and permissions

I want the boss of a department to have the ability to assign roles (to enrol in a course for example) only to a subset of users. This subset corrisponding to the employees of that department. Is there any way of doing it? Thanks.