I\'m trying to make a subdirectory in an MS Deploy package writable to the application pool user. Thanks to a helpful post about the setAcl provider by Kevin Leetham I was
FYI - this does work for a root website if you follow the convention specified in the post here: http://forums.iis.net/p/1176955/1977169.aspx#1977169
^$(_EscapeRegEx_MSDeployDirPath)\\@(CustomDirAcl)$
{$(_MsDeployParameterNameForContentPath)}/@(CustomDirAcl)
$(_DestinationContentPath)/@(CustomDirAcl)
This post also has the benefit of being able to specify a block of subdirectories in a single ItemGroup.