Any employee whose employee record lists that device in their POS device access AND who is an active employee with a matching PIN code can log in. Employee access is managed on the Employees page (a different feature area), not on the POS Device itself — the device page only controls what the terminal can sell and print, not who can use it.