I think that in PBS, assigning permissions to a token really limits the ability to use the token. But not sure, we need to ask Proxmox Staff.
Well, or put a couple of experiments with the API :)
UPD. To be honest, I haven't studied the PBS API much, only in terms of monitoring. It is even...