I don't recall agreeing to those permissions, either.
Just because the permissions are requested, that doesn't mean they'll be used. Take the "delete all mails" permission, for example. Exchange and Exchange ActiveSync are two-way synching protocols. If you delete a message on the phone or using a web browser online, the message will be deleted both places. This means that whatever is deleting the message needs permission to do so. And if it can delete one message, it can delete them all. There's no permission to allow deleting just single messages, so it has to request permission to delete them all.
I'm pretty sure the same type of thing applies to the reset permission. While I don't know what function may be asking, in order to perform a needed function, that permission must be granted because whatever function it is is lumped in with the reset permission.
By the way, you don't need any extra apps to connect an Android device to your Exchange mailbox. Add an Exchange or Corporate account.