Hi there,
Yes, the ACL must be enabled from the backend (disabled by default). When the ACL is enabled, each deletable message should have a 'trash' icon next to it. Kindly refer to my attached screenshot below.
We have temporarily enabled this ACL on our demo site so you should be able to test it directly.