...
And the user can add volumes to a VM by editing the VM on the Storage tab and dragging available volumes into the Storage list. Note that the Volumes heading will continue to display even after the privilege is removed.
Control access to volumes feature
...
To disable the display of the Volumes tab so that the user cannot manage persistent volumes.
Remove the "Manage virtual storage elements" privilege from the enterprise administrator role