Operator

The Operator runs the backup chain and defines what that work needs, without administering the organization or the people in it.

It holds full access to apps, inventories, and secret providers, which is the chain a backup actually runs through. The remaining resource classes are held at the configure level, so it can define and run the work but cannot delete those resources or decide who else reaches them. The exception is organization settings, which the Operator can view but not change.

In the organization family, the Operator has no access to the organization, its members, or the audit log. It can configure data residency and both kinds of legal hold, because those bear on where backed up data may live and how long it must be kept. Like the roles above it, it holds nothing in the deployment family.

Organization

Resources

Deployment