There should be an out of the box security role similar to “Data management operations user” which should allow data import export but not allow deletion of execution history. Currently there is no such role and if assigned to users, users can delete the trace of a data import.