Pre-hire candidates should not have access to any catalog items or servicenow backend

[Sruthi17]

We are working on building onboarding journey.
Obviously we'll trigger the journey for a candidate before 15 days from their Day 1. And before Day 1, we dont want candidates to view and request for the catalog items available in the employee center portal

We dont want candidates to view Servicenow backend tables and etc
Can someone tell me how to achieve this use case?
Whats the most commonly used practice for this use case?

[jonsan09]

You might be able to leverage explicit roles plugin (snc_internal/snc_external). Adding snc_external roles to prehire users and building user criteria and any additional ACLs around those roles, then removing the role on their hire date.  More info: 

• https://www.servicenow.com/docs/r/platform-security/explicit-roles.html
• https://www.servicenow.com/docs/r/platform-security/explicit-role-plugin.html