Wojciech_BUK
Valued Contributor III

It is not possible to block running specific commands. 

You rather block it in different way e.g. only onwer of catalog, schema or table can grant privilege to object, so you restrict who can be owner.

If someone creates table , he become table owner ( so he can grant access) , so you can block table creation.