By default all users will get the employee portal access, only system administrators should be provided with Admin Portal permissions. Admin Portal Permissions can then be defined through a permission profile which determines what access a user has.
Users can be added to the system manually or they can be imported into the system in bulk.