Two scenarios are possible in this case
An unrestricted user deploys a single machine and the admin snapshots that machine.
In this case, everything works just fine, as expected (snapshot is visible in Library).
The admin snapshots a machine that was group deployed to a set of users.
- The snapshot goes through, but the fact does not reflect in the library.
- This is because "labs" are not visible through the library interface.
- However, the admin can access this snapshot by "searching" for the machine on the library tab.