Hi,
Search about command authorization in the AAA section, you'll get ample information about it, i.e., on how to configure network devices so that you can allow certain users on ACS to have limited and certain user to have full access.
About taking a backup, that is pretty simple.
System Configuration > ACS Backup > Backup Now.
And you have a latest backup from ACS.
Regards,
Prem