Rich Rule with source address, port, protocol
firewall-cmd --add-rich-rule='rule family=ipv4 source address=192.168.1.101/32 port port=22 protocol=tcp accept'
Rich Rule with source address and service
firewall-cmd --add-rich-rule="rule family="ipv4" source address="10.235.74.0/24" service name=ssh accept"