Hello Vladislav,
Thanks for writing to us.
Please find my answer for your questions in below points:
1. Yes, you can use User management service without ACL
2. Link of the tutorial to understand the concept that how you can secure your App data by using App42 ACL.