Role-based authorization roles can be defined in the backup and restore granularity level, as well:

• backup: Provides privileges that are needed to back up the data. This role provides sufficient privileges to use the MongoDB Cloud Manager backup agent, the Ops Manager backup agent, or mongodump.
• restore: Provides the privileges that are needed to restore data with mongorestore, without the --oplogReplay option or system.profile collection data.