Hello @KVNARK .​ 

We cannot specifically restrict Vacuum operation alone.

You need to remove "MODIFY" access on the table and restrict only to the "Read" (SELECT) operation

Please note if you restrict to only "read" it will also affect all the write, update, merge into, optimize, truncate including "VACUUM" operation.

Ref: https://docs.databricks.com/data-governance/table-acls/object-privileges.html