In order to create batch operation following permissions are checked:

• CREATE permission on Batch resource
  or
  for the corresponding batch operation:
  • CREATE_BATCH_MIGRATE_PROCESS_INSTANCES permission on Batch resource
  • CREATE_BATCH_MODIFY_PROCESS_INSTANCES permission on Batch resource
  • CREATE_BATCH_RESTART_PROCESS_INSTANCES permission on Batch resource
  • CREATE_BATCH_DELETE_RUNNING_PROCESS_INSTANCES permission on Batch resource
  • CREATE_BATCH_DELETE_FINISHED_PROCESS_INSTANCES permission on Batch resource
  • CREATE_BATCH_DELETE_DECISION_INSTANCES permission on Batch resource
  • CREATE_BATCH_SET_JOB_RETRIES permission on Batch resource
  • CREATE_BATCH_SET_EXTERNAL_TASK_RETRIES permission on Batch resource
  • CREATE_BATCH_UPDATE_PROCESS_INSTANCES_SUSPEND permission on Batch resource

Note: Do not forget we have two different type of modification: batch of asynchronous modification of single instance and multiple instances modification.

Document the new permissions: https://docs.camunda.org/manual/7.10/user-guide/process-engine/authorization-service/#permissions-by-resource