Access only by employees

In the user profiles, you can have a boolean column to check if the email is your employee. Set the tab visibility to Employee Boolean is true.