Orchestrator limits access to the Orchestrator server file system from JavaScript and Workflows to specific directories.

Javascript functions and workflows only have read, write, and execute permission in the permanent directory c:\orchestrator.

The Orchestrator administrator can modify the folders to which JavaScript functions and workflows have read, write, and execute access by setting a system property. See Installing and Configuring VMware vCenter Orchestrator for information about setting system properties.

JavaScript functions and workflows also have read, write, and execute permission in the server system default temporary I/O folder. Writing to the default temporary I/O folder is the only portable, guaranteed, and configuration-independent means of accessing the file system with full permissions. However, files that you write to the temporary I/O folder are lost when you reboot the server.

You obtain the default temporary I/O folder by calling the System.getTempDirectory method in JavaScript functions.