I might be over complicating things here- but my only way to currently isolate managers is to export users and filter by manager permissions and then reupload them with a custom field on the profile -essentially duplicating the manager permissions status in order to automate groups and enrolments.
Have not done this yet- if there is a better way please can someone let me know?