Do all project users have the authorization to create separate virtual machines, or can they only boot the ones that have been created and configured by the administrator?
Within a project, every user has the same authorization, so everyone can create new virtual machines. The administrator is simply the person who requested and is liable for the given project and he is also the one to decide who is allowed to use the resources allocated to the project.