If we launch a synchronization with 'validation after creation' and a user execution without the validation right, then the content is created, and not validated.

It will be good to add a specific warning to prevent this case.
It will be good to allow the technical admin to have this right affectation
It will be good to have a explicite doc about this subject

For example userdirectory sync is concerned