I think that what you could actually do is to define membership relation for all employees (including managers) and then define component relation for managers group. This way ``managers'' become a subset of ``employees''. But frankly, my head goes numb with all the acs_object/party/person/user/group flexibility... :(
