Well, in https://pbs.proxmox.com/docs/user-management.html, one can read :
"Access Control
By default, new users and API tokens do not have any permissions. Instead you need to specify what is allowed and what is not.
Proxmox Backup Server uses a role- and path-based permission management...