If you are willing to do the work, it's not super complicated to get the basic functionality you want.
Here is the rough outline of one way to accomplish it.
virsh commands can be used to start and stop VM's
scripts can watch for the presence of files in a share. public or user password protected.
when a script detects a named file or deletion of said file, it does an action
So, your user would connect to a share, touch a file, and the VM would start. When the vm is stopped from within the guest, the script could delete that file, or immediately start the vm again, depending on what the script writer desires. Standard unraid users could be defined to restrict access to the controlling folders. You could have a share per vm that the script would watch, and only users granted access to that share could create the magic file.
Yes, I agree it would be nice to have user level permissions in the management GUI, but that requires Limetech to make significant changes. My suggestion can be implemented NOW with a little scripting.