If the user has the workspace creation ban role 1. Remove New workspace button on workspaces page 2. Remove the create workspace button from template rows on the templates page.