Why does Zendesk require so many permissions for Google Apps?

Question

Why does Zendesk require the below permissions to authenticate with Google Apps?

Answer

Each permission provides access to a feature of your support addresses that otherwise would require you to leave Zendesk Support to manage.

Find below a breakdown of each permission and its corresponding reason for requesting access:

View your basic profile
Standard integration requirement to match your user name with your Zendesk credentials.

View and Manage the settings of a Google apps group
Streamlines the Google Apps groups with Zendesk groups sync to seamlessly update existing support addresses or add new ones.

Manage the email settings of users on your domain
Manages user creation when a new user emails this support address.

View and manage the provisioning of users on your domain
Manages agent user additions and removals and also helps with verification through Google Single Sign On.

View and manage the provisioning of groups on your domain
Allows you to provision new support addresses.

View and manage the provisioning of domains for your customers
Provides synchronization between your Support and Google accounts.

Manage your new site verifications with Google
Included for Google Analytics verifications of the Help Center, and SPF and DKIM record-setting.