When we delegate a user for a vm to get console and reboot that vm. that user also able to delete vm.
I think delete action must be seperated from other actions in Authorization Requests Reference Table for onevm. delete function must be located in ADMIN like deploy and update.
delete boot shutdown suspend hold stop resume release poweroff reboot one.vm.action VM:MANAGE