You can use Commvault software to back up and restore Azure databases.
To configure restricted access, use the custom role defined in AzureDBBackupRole.json. Download the file, and then in the JSON file, change #SubscriptionID# to your subscription ID.