Netmail Archive 6.x
Netmail Archive will fetch some information from the mail system and save it in its cache (ie. the address book sync job). It collects this information via a powershell session. This article will list the cmdlets issued during this process.
Set-ADServerSettings (on-prem only)
Get-DistributionGroupMember (if DL expansion is assigned to SyncAB)
Get-Recipient (if DL expansion is assigned to SyncAB)
Get-JournalRule (on-prem only)
Get-MailboxDatabase (on-prem only)
These cmdlets are usually reserved for Organizational Management role group. If you don't feel comfortable assigning this level of permission to the Netmail service account, you can try the View-only Organizational Management role group or creating a custom role group for this purpose.