You can set permissions at various levels within vCenter - i.e. on vCenter, at the datacenter, cluster, host or VM levels, etc.
If you just need a user to control a VM you couldthe
1) create a custom role with just the required permissions to manage a VM.
2) Assign a user (domain) that role to the VM they need to control.