Can I restrict the authorizations for employees using kiosk/terminal groups?

Yes, by assigning the permitted kiosk/terminal groups to the employee, you can restrict which kiosks/terminals the employees are allowed to book at.
Please note that the kiosk/terminal groups (identical to the terminal groups in Sage) exist in halion clock:it and are assigned to the terminals.