The principal is granted the GetChanges right on the domain.
Abuse Info
This edge is not abuseable by itself.
When combined with GetChangesAll, BloodHound will create the abuseable edge DCSync.
When combined with GetChangesInFilteredSet, BloodHound will create the abuseable edge SyncLAPSPassword.
Opsec Considerations
This edge has no opsec considerations.
Updated