Turn off ability to create global maps from an internal workspace

During our monitoring of workspaces that were created - we noted some territories selecting internal as the workspace but getting to legacy global map content - which makes it seem like they could create Oracle or SAP engagements. Can we review how to turn this content off for internal workspaces?

Also can this idea please be mapped to the global query?