Keep the modal can and negate only the permission statement: "Visitors ___ the records room."
Erklärung
A modal auxiliary takes not directly, so can carries the negation before the bare verb access. Adding do would create an unnecessary second auxiliary.