Your comments

To clarify, it seems to be a big security hole, and while users should have some access in automate, they shouldn't have full access in backstage mode.