I would like to know is there any option,setting,power shell script to disable grant permission for entire web-application/site collection.

Requirement: Any user should not get option to grant permissions at site,list,item,library level.

My approach:

Providing Full control to  Application owner at web application level

deleting all permissions level

creating custom permissions level and remove permissions option at site,list level.

Please share your thoughts to full fill my requirement.

Thanks,

If you grant someone Full Control over the Web Application, they have just that, full control to do anything, including permissions management. You cannot remove permission levels.