Our Salesforce administrator is asking why Marketo needs the all the below in the Marketo permissions and saying this is just how the sync is built and Marketo can not do all of the below is not enough. Can people point to any articles on this subject please. Or any other advice.
please read the documentation first.
It does require some of that in a number of cases.
You can restrict the Marketo User Profile and see what happens. Marketo can't edit Opps and accounts. Depending on your use of Programs, it may push data to Campaigns (cost data).
It does need REC on L and C at a minimum or it is pointless.