Their processes allow it. They simple have a process of saying, "processes don't allow it" until you notify them that they'll need to get the necessary waivers up the chain of command or you'll be working elsewhere shortly.