It indexes FullAccess and SendAs permissions on shared mailboxes (excluding NT AUTHORITY\SELF). Let's say you have 10 mailboxes and you grant FullAccess permission to one user on another user's mailbox -this would result in 1 permission found.
Make sure you run the program with domain admin rights in order to find permissions granted through groups.