I'm guessing you're using xp_cmdshell to access the folder? If so, it'll be the SQL Server service account which needs privileges if this procedure is called by someone with sysadmin level privileges. If it's called by regular users, I'm assuming you've already set up the proxy account. In that case, it would also need to be accessible by that proxy account (if it is different).