Can ZXadmin for a domain be prevented from adding users?

We have enabled admin permissions through the ZX admin module for some domains. Edit features and Delegated auth are disabled.

But, the module seems to also give permissions to 'Add Accounts' and we found that they added dozens of users, effectively bypassing our billing systems and creating a lot of confusion. We didn't get any notifications about the new accounts, either.

Now, it's not clear to me if the 'Add account' function is coming from the ZX admin module or is already there in Zimbra OS. Whatever, I would like to know the following:

• Is there a way to give an admin user the ability to just change/reset passwords and quotas without being able to add new accounts?
• Is there a way to have a notification sent to the server admin when a new account is created on any domain?

Thanks in advance.