If you turn on SelfServiceSite Creation then Users with the right
permissions can navigate directly to the Site collection creation page
and create Site collections. You'll need to give them the link, but
they won't need access, won't have access to the rest of Central Admin.