You would want to use:
Restrict If UserID = ""
Allow If UserGroup = 8
The way it works is that if one line condition is met, it immediately does the response (restrict or allow). If the condition is not met, then it goes to the next line. By using a combination of Restrict If or Allow If you should be able to create the rule that you need.