I think answer should be option 1 and 3.

-- Impersonating allows a member of the sysadmin fixed server role or db_owner fixed database role to impersonate another user

http://blogs.msdn.com/sqlclr/archive/2006/06/16/635003.aspx