It sounds like that would work. You could maybe add an EmployeeType column to the Employee table to identify who is an admin and then if they are admin you could give them full access to all employees that way you wouldn't need a separate login for Employees and Admin.