To use the Forensic Search in archive, it is sufficient to have Monitoring/Archive/Armed Mode permission (see the section Creating and Configuring the Role and User System Objects).