Limited user access on vCenter 6 (deploy VM templates and manage VMs on specific resource pool)

Hi, we have a vSphere cluster running vCenter 6 & ESXi 6 and I would like to allow a specific AD user the ability to create their own VMs, and deploy templates **only** on a specific resource pool

Could this be done?

I have already created a folder for this user, and I put their 4 required VM templates in that folder

I have assigned for them the default role "Virtual Machine Power User" permission by cloning it

Which additional permissions do they need in order to deploy VMs and VM templates in this specific resource pool?

I dont want them to be able to see any of the other VMs in the cluster, just their own VMs

Thank you