Privacy - Prevent admin access to your data

Hi Marius 

End users have restore and view access on their data. Tenant admin do have view access on the data. They can only see file names and not content.

Tenant admin may restore data in or out of place and this is audited via the audit log or can be set with double authorization process via the security IQ

As a general best practice we would recommend setting using SAML for tenent admin logins and review of the audit log.  You may also onsider integrating with audit event with  SIEM so restore alerts can be captured in real time 

More on both can be found here https://docs.metallic.io/metallic/144869_security_posture_score_report.html