Without making any promises, this indeed helps. Thanks for asking the team and coming back to us.
There are however some questions that come up to me now.
1. Restore of security permissions for a user: This is actually Azure AD related. Are you still running AD also on-prem and synching? The reason I ask is that we don't backup Azure AD at this moment so if a user is deleted from a group, we won't be able to recover it. I'm not 100 percent sure but if it is a hybrid AD, that information might be on the on-prem AD and could be protected already with B&R
2. Not sure what you mean with cross tenant restore? Could you explain?