In order to be able to backup and restore N1QL metadata (currently, UDF definitions, may be expanded later), a user needs to have both the data_backup role and query_system_catalog role for bucket backups, so that access to the query system keyspaces is still restricted to authorised personnel.
Both Patrick Varley and myself think this is cumbersome, and it would be better to add ad hoc privileges to the backup roles, so that no extra roles are required to complete backups when UDFs are present.
Artem Stemkovski could you add the following permissions to the data_backup
I intend to also use cluster.n1ql.meta!backup for cluster backups, but I believe nothing needs to be added because the backup admin essentially already has full admin privileges.
Once you're done, could you pass this MB to me, and I'll amend query as necessary.