This screen shot shows the Manage Access Rules section with a tree view of WebSite1 that is expanded to show the App_Data folder. Besides the tree view is a panel that shows the rule: Permission: allow, for User and Roles: all, for Delete.

Below that is a link to Add new access rule