File System Permissions
The default permissions assigned to the IIS_IUSRS group on the inetpub\wwwroot folder are needed for the website to run. This occurs automatically when the MasterPortal folder is stored as a subfolder of inetpub\wwwroot. When the MasterPortal folder is not located inside the inetpub\wwwroot folder, assign Read & execute, List folder contents, and Read permissions to the IIS_IUSRS group:
Self-hosted_Installation_Guide_for_Portals.pdf mentions steps to secure the App_Data folder, but doesn't specify exactly what permissions to use.
Several folders are created within the App_Data folder at run time, and additional permissions need to be assigned to this folder for creating, updating, and deleting files and folders within it. Assign Modify and Write permissions to the IIS_IUSRS group:
