Here is how you can create a VMWare user account with minimum permission to manage Machine Creation Services on XenDesktop 5.0.

Follow this simple Procedure to get it up and running:

In the VMWare DataCenter Level, you must create a user account with the following permissions:

Datastore.AllocateSpace
Datastore.Browse
Datastore.FileManagement
Network.Assign
Resource.AssignVMToPool
System.Anonymous
System.Read
System.View
Task.Create
VirtualMachine.Config.AddExistingDisk
VirtualMachine.Config.AddNewDisk
VirtualMachine.Config.RemoveDisk
VirtualMachine.Config.Resource
VirtualMachine.Interact.PowerOff
VirtualMachine.Interact.PowerOn
VirtualMachine.Interact.Reset
VirtualMachine.Interact.Suspend
VirtualMachine.Inventory.Create
VirtualMachine.Inventory.CreateFromExisting
VirtualMachine.Inventory.Delete
VirtualMachine.Inventory.Register
VirtualMachine.Provisioning.Clone
VirtualMachine.Provisioning.DiskRandomAccess
VirtualMachine.Provisioning.GetVmFiles
VirtualMachine.Provisioning.PutVmFiles
VirtualMachine.State.CreateSnapshot
VirtualMachine.State.RevertToSnapshot

If you want XenDesktop to tag virtual machines you create, the user account must also have the following permissions:

Global.ManageCustomFields
Global.SetCustomField

Tagging excludes any virtual machines you create using Machine Creation Services from the list of virtual machines you can use as the base image for creating or updating a catalog, ensuring you use a clean base image for creating new virtual machines.

Source