1

Alex Pankratov :

Apr 01, 2020

Local Administrator's membership is added to allow for using the shadow copying service. This part of VSS is rather poorly documented, so it's possible that being a member of Backup Operator group would be sufficient.

If you are not using VSS, then you can lock down "Bvckup 2 Service" user around the file access that your backups require.