Why does Zendesk require so many permissions for Google Apps?

Question

Why does Zendesk require the below permissions to authenticate with Google Apps?

Answer

Each permission provides access to a feature of your support addresses that otherwise would require you to leave Zendesk Support to manage.

Find below a breakdown of each permission and its corresponding reason for requesting access:

• View your basic profile
  Standard integration requirement to match your user name with your Zendesk credentials.
• View and Manage the settings of a Google apps group
  Streamlines the Google Apps groups with Zendesk groups sync to seamlessly update existing support addresses or add new ones.
• Manage the email settings of users on your domain
  Manages user creation when a new user emails this support address.
• View and manage the provisioning of users on your domain
  Manages agent user additions and removals and also helps with verification through Google Single Sign On.
• View and manage the provisioning of groups on your domain
  Allows you to provision new support addresses.
• View and manage the provisioning of domains for your customers
  Provides synchronization between your Support and Google accounts.
• Manage your new site verifications with Google
  Included for Google Analytics verifications of the Help Center, and SPF and DKIM record-setting.