As a project member, without being a project admin, I can open the page Compute > Images. In the list of images, a 'Lauch' button is shown for non-deprecated images. I can click that button, use the normal 'Lauch instance' dialogue to choose the instance name, image, flavor. When I click 'Launch instance' after the last step, it fails with the error
Policy doesn't allow os_compute_api:servers:create to be performed. (HTTP 403) (Request-ID: req-84fd74ae-991a-4186-bdc6-5322a85f7438)
The button "Launch" shouldn't be displayed on the list of images in the first place if I'm not allowed to use it (which I'm rightfully not, 'cause limiting this to project admins is intended).