Update manager group memberships from employee table changes

Your employee table updates can leave manager status out of sync with directory groups and timekeeping roles. Keep manager memberships and roles correct so managers have proper access within minutes.