Did you ever get an answer? I have a user having this problem from a Mac. He has "console interaction" permission on his folder and all the VMs in his folder. Can't give him access at host level. I must be missing something in my understanding. That solution does have unwanted side effects