Technician access levels

At the moment, we have 2 levels of access to our helpdesk.

An "SDTech", purely a technician who has full control of the requests & "SDAdmin" - self explanatory.

Unfortunately it seems when we need our 1st line support guys to create new users on the helpdesk (we don't have AD linking set-up yet, though this would be useful!), they cant see the "admin" tab as there not administrators on the helpdesk.

Is there anyway we can restrict these guys to "SDTech" only yet also enable them to create new users?

Or....., should we concentrate on setting up the AD link (can this run automatically?) If we go down this route will any of our existing users be deleted?

Thanks in advance.