Impersonate as admin

My understanding is I can have any user configured as a technician in AD Manager Plus and I don't have to give them any specific permissions in AD if I have 'impersonate as admin' ticked. Is that correct?

So - if a technician creates a new user the security log (on the domain controller) will show that new user as being created by the account configured in 'domain settings'. Is that correct?

So finally; in AD Manager Plus would the audit reports show me which helpdesk technician actually created the new account?

Hopefully the above is clear..

Thanks