To use the Forensic Search in archive, it is sufficient to haveĀ Monitoring and Archive or Monitoring/Archive/Armed Mode permission (see the section Creating and Configuring the Role and User System Objects).