User restrictions for new VM