The ability to perfrom Backups should be a stand alone task that you can assign to users. This would allow you to choose what users can perfom backups without givign them full access.