Automated backup of organisations collections

Hello Everyone,
We are using bitwarden for our organisation and due to compliance we need to have a local backup of our collections and vaults.
The manual way is easy, just export json_encrypted via the Web-Interface or the CLI.

To completely automate this via CLI I could use a “Personal API Key for CLI Authentication” but that would put us in a pickle.
If this key ever gets stolen the attacker could do anything with this API Key and the CLI with our data…

So my question is, can I set up a user who only has the rights to export json_encrypted and absolutely nothing else?
I didn’t find something for that in “custom permissions”.

Thanks in advance!
Cheers /Carsten