The Rock can authenticate a user once that user has been enrolled with a valid badge credential. If guests are given a temp badge, the guest can enroll their face with the badge. Best practice would be to do this where a Rock is used in Enrollment Station mode at reception.