It would be helpful if the security settings distinguished between report running and Expense Management tasks. I have my department heads set up to only see certain accounts (via a query) so that when they run a report they only see the accounts they oversee.

BUT, this means that in Expense Management they can't submit an invoice or a credit card charge to another department for approval or review because they don't have rights to that department's accounts.

They are only trying to submit a charge to another department - not approve it - and the system should allow for this flexibility and granularity. Right now it's one size fits all as far as the security settings.