Azure policy doesn't works on tenant scope and there were no permissions in azure RBAC too for restricting access to create an AAD.
You can restrict users from creating additional tenants using this new handy preview toggle switch setting in Azure AD under
User Settings>Tenant creation>Restrict non-admin users from creating tenants (preview):
This method ensures that only Global Admins can create additional tenants