The permissions you mentioned are required for the 365 integration for all areas of the integration, including the permissions that are necessary for the Contact sync, Calender sync, SSO, etc. Basically, the permissions that are set are the ones listed below and are all set automatically for integration to work.
Graph Application permissions:
For the SSO feature:
