How do you give an operator permission to manage only the VMs in one folder?
vSphere uses role-based access control: assign a role (a set of privileges) to a user/group on an inventory object, and it propagates to children. Create or use a role like "Virtual Machine Power User", then assign it to the operator on that VM folder only. Permissions elsewhere are unaffected, enforcing least privilege.