You can use exiting virtual machine user role to provide permission to user.
Using this role user can access VM console, do power on /of such task.
There other role like virtual machine admin which provides .ore permission on VM.
You can also clone any existing role and create custom role and provide required privileges.
Thanks,
Haridas
Please consider awarding points for "Correct" or "Helpful" replies. Thanks....!!!
https://vprhlabs.blogspot.in/