You can use Commvault Cloud software to back up and restore Azure databases.
To configure restricted access, use the custom role defined in AzureDBBackupRole.json. Download the file, and then in the JSON file, change #SubscriptionID# to your subscription ID.