Connect Edition and cloud administration information

Is there any specific documentation or training offered on best practices for the Connect environment, relating to user permissions and administration in a controlled IT environment. With the connect edition access to Bentley Portal this has opened up access and security issues that we need to understand before it can be deployed within the organization. I have spent a considerable amount of time trying to find answers to the following

In a controlled IT environment relating to the Connect editions and portal access

  1. Periodic updates, how do we turn off the upgrade advisory for our staff?

  2. What is recommended method of acquiring the upgrades for periodic deployment using SCCM?   What would happen if a machine had missed a prior upgrade?

  3. Bentley client personal portal access and passport usage? Costs? How can passport usage be denied, restricted or assigned?