Network restrictions to access ISC and NERM

What is SP best practices on restricting access. We have users in both ISC and NERM. On non employee’s do not need access to ISC interfaces. Looking to have users in NERM be directed solely to the NERM dashboard and not the ISC landing page. Likewise we have ISC users that do not need to see or have any type of access to NERM. Understood if no role then no harm but want to eliminate the steps. What are other’s doing in this situation?

Anyone feel like sharing?

Have you looked at "Configuring Product Branding? " within IDN/ISC and data segmentation. I believe the future state will allow you to remove links/urls based on what was announced at this past Navigate.

Is there documentation that explains this or only talking points in Navigate