It’s probably filesystem permissions (I say probably because IIS can also limit writing at it’s own configuration level, but I believe the default is to allow whatever the filesystem allows). You need to allow whatever user IIS is running as to write to those locations.