Does an AJAX call on the Admin Side Automatically include the User Data/Capabilities?

You don’t need to send any additional data, since the user cookies (which are used for authentication) will be sent by default.

You have access to all the WP functions, including current_user_can().