Recently during one the implementation , The customer had an use case that they din’t want the users to see local datastore and they din’t want the users to Create any VM’s in this data store. So any important data had to be dumped on their shared storage (SAN, NAS) only.
Log in to vCenter > Home > Storage > Select the Datastore > Permissions > Select User/Group > Click No Access > Uncheck Propogate
Kindly do not apply this setting for Administrators group as we will then not have visibility to this Data store from any Admins as well. In case if you want to remove this permission that you have applied kindly go to Administration > Access Control > Global Permissions > Delete the Group or user