imp_full_database and 'datapump_imp_full_database' role difference

Hi:

If  only use expdp/impdp in  database (version=12.1.0.2, platform=IBM AIX7.1, single instance, no-RAC) as backup method, to separate user roles, it is going to be a 'bkup_role' vs 'restore_role' in DB:  depends on future restore cases, It will be schema-level or full-DB level restore.

So, do we need to grant all the following 4 roles to 'bkup_role' and 'restore_role' - I numbered them to separation description

bkup_role: 1. exp_full_database, 2. datapump_exp_full_database

restore_role: 3. imp_full_database, 4. datapump_imp_full_database.

particularly, will only above 1 & 3 be enough? for 'restore_role', do I still need '4' if '3' is granted? same for 'bkup_role'.