---
id: 5731
title: "AD Group Risks: Hidden Dangers in Backup Operators"
source_domain: semperis.com
source_url: "https://www.semperis.com/blog/ad-group-risks-backup-operators/"
published_at: "2026-07-28T16:40:23Z"
tags: ["active-directory", "backup-security", "privilege-escalation", "identity-security", "dfir", "semperis", "backup-operators"]
phying_url: "https://phying.com/item/5731"
lang: en
---

# AD Group Risks: Hidden Dangers in Backup Operators

## Summary

Semperis opens a series on overlooked AD groups with Backup Operators, whose SeBackupPrivilege and SeRestorePrivilege bypass NTFS ACLs and offer attackers a quiet path to domain compromise.

## Intelligence Metadata

- **Sources:** semperis.com
- **Published:** 2026-07-28T16:40:23Z
- **Original:** https://www.semperis.com/blog/ad-group-risks-backup-operators/
- **Phying News:** https://phying.com/item/5731