Minimal Access Profile for performing backups

After much searching I could not find any documentation on what the minimal access is required to perform backups.  So I experimented and came up with this.  Hopefully the next person will not have to search so long.

(BTW, support web chat was not helpful)

config system accprofile   edit "backup-profile"     set secfabgrp read     set ftviewgrp read     set authgrp read     set sysgrp custom     set netgrp read     set loggrp read     set fwgrp read     set vpngrp read     set utmgrp read     set wifi read     config sysgrp-permission       set admin read-write       set upd read       set cfg read       set mnt read     end   next end