As @Alphabetic mentioned, roles are assigned per user, not per department as in v18.
As a result, if a user is assigned a Supervisor role, that permission applies across all departments the user is part of, including your 'Default' department.
At this time, there is no way to assign different...