Hi Mr. Heck (if that is your real name!),
Clarification is correct.
The "restore-read" group would have to be able to copy files from the users' email store, ibays and the users "files" folder.
Furthermore, we are using a FTP synchronization software that runs on a Windows computer to perform an offsite backup to our webhost. The FTP software user must have read access to everything.
Off topic: If I could figure out a way to mount to a FTP server share from inside Linux I could simply use AFFA (rsync) to perform this external backup (I prefer this plan).
Thanks,
Kevin