One possibility is to use access control lists . A file system containing /backups must be mounted with the acl option. Then give access to the group that should have it:
setfacl -d -Rm group:backup-group:rwx /backups setfacl -Rm group:backup-group:rwx /backups
All subsequently created files and directories under /backups will be written to backup-group if the backup program does not explicitly use restrictive permissions (if it stores any archive files, you will be fine, but if it is, for example, rsync saving permissions, which will not be executed).
Another possible option is to use bindfs to provide a view /backups (mounted elsewhere) with different permissions.
Gilles
source share