The TransferFiles permission is a role-based control in ScreenConnect that decides whether a user can move files during a remote session. In some configurations, the same permission also enables related actions such as launching tools or delivering support utilities from that session.
This matters because file transfer is often a trusted path: administrators use it for installers, scripts, logs, and patches. If the permission is too broad, an attacker who gains a valid technician account, or abuses a session authorization flaw, may use the normal support workflow to stage payloads or move malicious tools onto an endpoint. Defenders reduce risk by applying least privilege, reviewing which roles truly need TransferFiles, and auditing session activity for unexpected transfers or tool launches.