if you go to the ‘user’ tab in Admin pages as a moderator, you still have access to the “export” feature. While I didn’t actually test it, I’m assuming (possibly incorrectly) that this is the same export report that I get as admin, and this includes email addresses and data in custom fields from SSO
EDIT: yes, I just re-tested it and downloaded the ‘user list’ with all the information I could want on the members while impersonating a user with ONLY moderator access, not admin level
SECOND EDIT: Looking at the logs, I also don’t see an entry for the user exporting the user list. I can see the log for my impersonation of the user, and the deletion of the PM with the export link, but no reference to the fact that the user list was exported