Access and Provisioning Configuration for Students and Faculty

Hi all,
Just curious whether anyone has perspectives on best practice configuration for your Higher Ed community. I’ve enforced SSO with university ids.
Do you place restrictions on student use? How? How do you balance this with facilitating research and faculty use? How do you deal with potential brand damage of a student community with ability to publish under your institution’s name?
Ben, University of New South Wales (Australia)