Backup Auditor
The Backup Auditor holds nothing above the view level, so nothing it reaches can be changed. It sees how backups are configured and what has run: apps, integrations, policies, settings, configuration bundles, data classes, environments, schedules, and the audit log.
Restore point data, secret providers, inventories, and edges are out of reach, so the review it supports covers the configuration and the record of activity rather than the backed up data itself or the credentials used to reach it. It holds no other organization permission and nothing in the deployment family.
The Auditor reads everything an organization holds. The Backup Auditor reads its configuration and its audit log alone.
Organization
| Permission | Access |
|---|---|
| Organization | No access |
| Members | No access |
| Audit log | View |
| Data residency | No access |
| Restore points legal holds | No access |
| Inventory resources legal holds | No access |
Resources
| Permission | Access |
|---|---|
| Inventories | No access |
| Apps | View |
| Restore point data | No access |
| Secret Providers | No access |
| Integrations | View |
| Policies | View |
| Settings | View |
| Edges | No access |
| Configuration bundles | View |
| Data classes | View |
| Environments | View |
| Schedules | View |
Deployment
| Permission | Access |
|---|---|
| Control plane | No access |
| License | No access |