You need a dedicated backup_service role to tailor permissions.
Populate that role with only the required privileges for backup operations.
Assign the backup_service role to srvbackup01 on the Production VM folder and enable propagation so all child VMs inherit those minimal permissions.

Comprehensive and Detailed Explanation From Exact Extract:
To enable Virtual Machine Encryption in a VMware Cloud Foundation environment, the official process consists of these steps:
Configure a Key Management Server (KMS) and add it to the vCenter (A): A supported Key Management Server must be configured and registered with vCenter to provide encryption keys.
Create an encryption policy in vCenter (C): An encryption storage policy is created, specifying encryption as a rule. This policy will be used to control which VMs are encrypted.
Apply the encryption policy to the existing VMs (E): Once the encryption policy is created, it must be assigned to the virtual machines intended for encryption. This will trigger the encryption process for those VMs.
Other actions such as enabling SSH on ESXi hosts, applying the encryption policy to ESXi hosts, or enabling encryption on hosts directly are not required steps as per VMware's documented workflow for enabling VM encryption.

Enabling Encrypted vSphere vMotion encrypts the vMotion network traffic, ensuring the confidentiality and integrity of data as it travels between hosts.

When users are unable to access the vCenter Server and the vSphere Client is not responding, the first step is to check if the vCenter Server is powered on and whether its essential services are running. This can include services like the vCenter Server service, vSphere Web Client service, and other related services that enable access to the vCenter Server. If the services are stopped or unresponsive, restarting them may resolve the issue.

The primary purpose of configuring VM storage policies in a VMware vSphere environment is to enforce specific storage requirements such as performance, availability, and redundancy. These policies help ensure that virtual machines are placed on datastores that meet the desired service levels and characteristics.