## 2026-09-16T14:57:56Z ep0 ACL BEFORE (read-only) — scope: the hub's tenantsync auth-id only
--- all ACL entries:
+========================+=======================================+===========+=================+
| ugid                   | path                                  | propagate | roleid          |
+========================+=======================================+===========+=================+
| felhom@pbs             | /datastore/felhom-offsite/demo-felhom |         1 | DatastoreBackup |
+------------------------+---------------------------------------+-----------+-----------------+
| felhom@pbs             | /datastore/felhom-offsite/demo-hp     |         1 | DatastoreBackup |
+------------------------+---------------------------------------+-----------+-----------------+
| felhom@pbs             | /datastore/felhom-offsite/tester-1    |         1 | DatastoreBackup |
+------------------------+---------------------------------------+-----------+-----------------+
| felhom@pbs!demo-felhom | /datastore/felhom-offsite/demo-felhom |         1 | DatastoreBackup |
+------------------------+---------------------------------------+-----------+-----------------+
| felhom@pbs!demo-hp     | /datastore/felhom-offsite/demo-hp     |         1 | DatastoreBackup |
+------------------------+---------------------------------------+-----------+-----------------+
| felhom@pbs!tester-1    | /datastore/felhom-offsite/tester-1    |         1 | DatastoreBackup |
+========================+=======================================+===========+=================+
--- users/tokens:
+============+========+========+===========+==========+=======+===============================================+
| userid     | enable | expire | firstname | lastname | email | comment                                       |
+============+========+========+===========+==========+=======+===============================================+
| felhom@pbs |      1 |  never |           |          |       | offsite tenancy (per-customer privsep tokens) |
+------------+--------+--------+-----------+----------+-------+-----------------------------------------------+
| root@pam   |      1 |  never |           |          |       | Superuser                                     |
+============+========+========+===========+==========+=======+===============================================+
--- roles that carry Datastore.Modify:
