ShareGate Apricot needs consent to access your Global Administrator permission for the first connection. This consent gives ShareGate Apricot authorization to access the resources needed to crawl your environment.
ShareGate Apricot is a multi-tenant application (used by different customers) that is registered in the ShareGate Azure Active Directory. Some of the permissions the app requires are delegated permissions, so a Global Administrator must consent on behalf of all the users in your tenant. After the initial consent is given, you just need SharePoint Administrator permissions to benefit from the app and its features.
All Azure Active Directory applications use resources from Azure, Microsoft Graph, and/or SharePoint Online APIs.
More information regarding permissions is available here: Permissions required for ShareGate Apricot.