Configure Custom Locations and Permissions for Apps and Logs Folders
By default, the MATLAB®
Web App Server™ stores applications in the apps folder and logs in the logs folder
located within the server's root configuration directory. If you use the webapps-config utility to change the apps_path or
logs_path to a different drive or a network share, you must
manually configure the operating system permissions for those new directories. The
server does not automatically update permissions on new folder locations when the
configuration is changed.
Permission Requirements for Service Accounts
MATLAB Web App Server uses two distinct service accounts to maintain a secure, low-privilege environment. For the server to function correctly, both accounts and the authors group must have specific access rights to your custom folders.
Required Access Levels
Server Service Account: This account runs the main server process, identified as the
mw-webapps-R2026aservice. It requires Read, Write, and Execute permissions on the apps folder to manage and serve web apps. It also requires Read and Write permissions on the logs folder to generate server-level logs.Apps Service Account: This account runs the individual app sessions, identified as the
mw-webapps-launcher-R2026aservice. It requires Read and Execute permissions on the apps folder to run the MATLAB code. It requires Write permissions on the logs folder to record session-specific information.Authors Group: Members of the
MwWebAppAuthorsR2026agroup require Read and Write permissions on the apps folder to upload and delete web apps through the server home page.
| Account or Group | Folder | Required Permissions |
|---|---|---|
| Server Service Account | Apps Folder | Read, Write, Execute |
| Logs Folder | Read, Write | |
| Apps Service Account | Apps Folder | Read, Execute |
| Logs Folder | Write | |
| Authors Group | Apps Folder | Read, Write |
Configure Permissions for Custom Folders
When you change or move the default apps or logs folders, follow these steps to ensure the server maintains access.
Identify the Accounts: Locate the names of the accounts running the
mw-webapps-R2026aandmw-webapps-launcher-R2026aservices. You can find the account name associated with these services in the Services panel on Windows® or by checking the service files on Linux® and macOS. For details, see Service Information.Apply Permissions: Use your operating system tools to grant the access levels listed in the requirements section.
Verify Parent Folders: Ensure the service accounts have Execute or Traverse permissions for every parent directory in the path leading to your custom folder. If the server cannot traverse the entire path, it reports that the folder does not exist even if the folder permissions are correct.
Use Network Locations for Applications or Logs
If you set the applications or logs path to a network location using a UNC path, you must consider how the service authenticates across the network.
Local service accounts do not have an identity on the network and cannot access files on a different server. To use a network share, you must configure the server and worker services to run as a domain account. This domain account must have the necessary Read and Write permissions on the network share. If you use local accounts for these services, you are restricted to using folders on the local hard drive.
Update the Configuration
After you have prepared the new folders and applied the correct permissions, use the following commands to update the server configuration.
To change the apps folder:
webapps-config set apps_path<path_to_new_folder>To change the logs folder:
webapps-config set logs_path<path_to_new_folder>
You must restart MATLAB Web App Server for these changes to take effect.
