HI Daniel ,
Thanks for clearing my doubt.Yes you are right. The user needs to have normal PFCG authorizations to carry out those activities,which you want to restrict through ACE. I dont think ACE can give you rights to perform actions for which you dont have authorizations (PFCG ones).
Thanks again.
Regards,
Ameet