How can I restrict/limit the permissions provided to SimpleBackups?
How to restrict what SimpleBackups may access.
It depends on the backup type.
File Backups
Set up a user with READ access on the folders that you need to back up, and just WRITE permission on the operations directory.
The operations directory is where SimpleBackups stores files required for its operation. Example, backup log during a running backup, rclone
which is used to send backups to your storage.
Database Backups
Set up a user with READ access on the databases you need to back up.
Storage Backup
You can give SimpleBackups as little permissions as possible on your storage. It depends on the storage, but just read/write to where backups should be stored it fine. You may also connect a read-only storage and do not provide SimpleBackups with a write permission if you prefer.