RBAC roles for backup and restore
Currently it is not possible to fine-grain a role with permissions to allow specific users to perform a backup/restore separately from creating virtual machines.
We have several teams that should be able to perform their own backup/restore, but they are unable to do so because that implies a security risk where they could also deploy virtual machines manually.
There are situations like ours where people are only allowed to deploy virtual machines which adhere to security measures taken on an OS level, and thus should not be able to deploy virtual machines without them.
However, being able to perform a backup/restore for such machines isn't the same as deploying a new virtual machine. As a backup/restore could only be done from a snapshot which is created from a VM that follows those rules.
It would be good to have the ability to define actions/notactions specifically for backup/restore in custom roles to provide permissions to users/teams.