It seems like Operator given on the client side in Bedrock realms.

Hacked clients have the ability to grant themselves operator in Minecraft Bedrock realms. The server treated this player as if they were legitimately op'd, giving them the ability to access the kick command, command blocks, and all other existing operator commands.

Talk to Helen Zbihlyj for more information.