# Data connection folder access

The Data connection folder access page shows the folders that folder data connections are allowed to point at during migration. The page is available only to users with the Owner role, and is reached from the user menu.

## Purpose

Folder data connections are migrated by reading the folder they point at and uploading its contents to Qlik Cloud. That read happens as the account this service runs as, which is usually more privileged than the person who started the migration, so the folders a data connection may point at are restricted.

## Restriction tiers

The restrictions have three tiers:

* Locations that are always denied: drive roots, administrative shares, device paths, the Windows and Program Files directories, ProgramData, and the installation folder.
* The user profiles tree: denied, unless an allowlist entry names a folder inside it.
* An optional allowlist: `DeployOptions:DataConnectionAllowedRoots` in `Config\deployOptions.json`. The allowlist narrows everything else to the folders that are actually used.

## Related pages

* [Managing users](https://help.qlik.com/en-US/migration/Content/AnalyticsMigrationTool/Managing-Users/Managing-Users.htm)
* [Deployment options](https://help.qlik.com/en-US/migration/Content/AnalyticsMigrationTool/Managing-Migration-Steps/Run-Settings/Run-Settings.htm)
* [Product limitations](https://help.qlik.com/en-US/migration/Content/AnalyticsMigrationTool/Product-Limitations.htm)