How to disable tracert command in cisco device?

Trace route command has privilege level one , so any user who has priv-lvl one or above one will have access to this command by default.

You can use ISE ( Identity Service Engine ) to filter  this command for users using TACACS+ as the protocol.