Dynamic IP Restrictions - how to whitelist certain IP addresses

Hi everyone. 

I could really use some help please. I can't figure out how to implement an IP whitelist alongside a site-wide DIPR. I want to limit the general public to say 50 requests, without blocking internal staff (known IP ranges) who are running lots of requests to the live website.

Thanks for your suggestions

Tim

<security>
<dynamicIpSecurity denyAction="Forbidden">
<denyByRequestRate enabled="true" maxRequests="50" requestIntervalInMilliseconds="86399999"/>
</dynamicIpSecurity>
</security>