Backing up GPOs requires minimal levels of permissions on those GPOs, but more are needed in order to recover a GPO. This makes sense, since we are talking about writing into Active Directory, or even overwriting existing GPO settings. To be able to restore an existing GPO, one that is still sitting inside AD but that you want to roll back to a previous point in time, you will need to have the permission entitled Edit settings, delete, modify security.