The view_compute_resources is required for users to select the compute resource to deploy on when creating a new host. If the user has access to power_compute_resource_vms, they can go into the compute resources "Virtual Machines" tab and power VMs which they shouldn't have access to. I assume this is the same for deleting hosts as well but I haven't tested it. Perhaps there needs to be another permission called "deployon_compute_resource" which allows users to select the compute resources in the host creation page but not browse the compute resource page.

Currently on 1.5.0