How to deny ability of users to publish anything to Bentley Cloud

We wish only to utilize CONNECT Licensing. However, once a user has signed into CONNECT Licensing, it seems that also opens up access to create Assets and Projects, and enables the use of ProjectWise ContextShare. We wish to prevent our users from creating and/or putting "in the cloud" (either on purpose or accidentally). How would we configure this?