We are also having this issue and need to explain the behavior to auditors. Also, there is world write and sticky bit on ./snapshot ./log ./IPC ./Transactions and ./tmp. Any help would be appreciated. They're going to tell us to switch the perms and I'd like to know what's going to break.
world writable because if you have bsa users mapped to different local accounts they won't be able to write into those directories, and they need to. sticky bit so that one user can't delete another user's stuff.
so, if all bsa users are mapped to root, then you won't have a problem. if you have users mapped to different local users then deploy, snapshot and other stuff will break.
You need map the bsa user with administrator or root in exports file and users.local file
Please, verify if you mapped this user in this files with one account.