They were SQL login account permissions and were ad accounts and they were not documented. I agree that it seems like overkill but the SharePoint admin feels that we don't know what other permissions were "lost" so we should restore them all. And we don't use always on.