If you only have Visitor Registration access points, you can leave the default “All Access” rule so that all users have access to all of your access points.
However, if you have multiple types of access points, you should create multiple rules. Select the Rules menu and:
You should configure your “Employee Access” rule to provide access to your employee only access points to your “Employees” group.
You should configure your “Visitor Access” rule to provide access to your Visitor Registration access points to both your “Visitors” group AND at least one System Administrator. For example: