> As it has already the VM.Backup priv, which means it can already make > a (snapshot) backup *and* restore them - i.e. change over the data/state > of the VM. I thought restore needs allocate permission on the storage?