@Chico008
ACLs are used to assign rights to the guest users. As you said you have an admin who can do anything. In case you want to go with acl then your guest can get no leverage by using ACL
create vm
You as an admin will create VMs and manage other stuff but you then have ability to give three type of rights to the guest user.
admin, operator, viewer
In case of VMs when you give the admin right to a user then it means that user can have ability to anything with that VM.
Delete, Reboot, etc
But from you query you said that you want to give a right to guest user to
create/run the vms
to achieve this you have to look Self Service feature which is supported in XO from sources and in Premium XOA
In self service you have ability to create resource sets which are pools, storage, networks, templates etc, and assign a user or group to it.