Role-based authorization roles can be defined in the backup restore granularity level as well:

• backup: Provides privileges needed to back up data. This role provides sufficient privileges to use the MongoDB Cloud Manager backup agent, Ops Manager backup agent, or to use mongodump.

• restore: Provides privileges needed to restore data with mongorestore without the --oplogReplay option or without system.profile collection data.