Forbid use of kubectl commands

So, we need to meet PCI DSS requirements. Some of requirements force use of individual users for changing/modifying anything inside of the environment. Because i was not able to find possibility to do so for running kubectl commands, i want just to forbid any use of kubectl commands, how can i do this?

Thanks