Give a developer rights to create Virtual Machines

I need to give a user the ability to create virtual machines in our VSphere 4.1 VirtualCenter. We have one datacenter and 2 ESXi 4.4

host machines:

Servername

  DataCenter

      Host1

         VM

         VM

         VM

      Host2

         VM

         VM

         VM

So I need to give these permissions in Host1 basically, Host2 holds network Infrastructure servers which he MUST NOT have access to.

He needs to create a VM, deploy OVF, add permissions to the VM. I tried being real fine grained with it using KB 1023189. I added vApp

permissions and a couple other things but it did not work. Finally gave him administrator role at the Datacenter level and No Access at Host2

and below. He says he can't open a console. What am I doing wrong?

I want the minimum rights if possible. And PLEASE don't just point me to KB articles!

...AR