Data connection folder access
Last updated: 10/30/2026The Data connection folder access page shows the folders that folder data connections are allowed to point at during migration. The page is available only to users with the Owner role, and is reached from the user menu.
Purpose
Folder data connections are migrated by reading the folder they point at and uploading its contents to Qlik Cloud. That read happens as the account this service runs as, which is usually more privileged than the person who started the migration, so the folders a data connection may point at are restricted.
Restriction tiers
The restrictions have three tiers:
- Locations that are always denied: drive roots, administrative shares, device paths, the Windows and Program Files directories, ProgramData, and the installation folder.
- The user profiles tree: denied, unless an allowlist entry names a folder inside it.
- An optional allowlist:
DeployOptions:DataConnectionAllowedRootsinConfig\deployOptions.json. The allowlist narrows everything else to the folders that are actually used.