We do need both for authenticating and storing accounts, as far as i checked no other permissions needed.