Look at the mkdir statement.
Of course, the agent signer need to have access to perform restrictive functions. Make sure you understand the security implications of what you are doing
I most cases I don't see a need to create folders in the Data directory, use a directory outside the Domino structure instead.
My advise would be not to do it.