How can we hide the benefits self service app for benefits ineligible employees

Summary: We have about 1/3 of our employees who are eligible for benefits. Our employee role displays the benefits app to all employees though. How can we limit this to only being visible to those employees who are eligible for some benefits programs/plans and hide it for all others?

Content (required): The delivered Employee abstract role as well as our custom roles currently grant access to the Me > Benefits tile for all users. This will create challenges if we display the Benefits app to our ineligible associates. We're looking for options for how we can limit the visibility to this app to only those employees who are determined to be eligible for one of our benefit offerings?