When deploying a new vApp, you receive an error "The Cluster does not contain Valid hosts." VM's can be deployed. separately.
The vApp permissions are separate resource type in permissions. You can apply Specific permission to either the top level or cluster level to allow users to create them. They act separately from individual VM permissions.
These are minimum permissions necessary for creation by the user for normal operations. See vApp Privileges for additional Permissions.