When attempting to perform a copy/move operation, one of the following messages is displayed:
Access Denied. User must be in Site Collection administrators permission group or Web Application Policy with Full Control!
Only farm administrator can create new Site Collection.
When ControlPoint default security is in effect, you must either be a member of the Site Administrator group or have Full Control permissions on the WAP User Policy at both the source and destination. This applies to all copy/move operations, including Copy/Move Lists and List Items.
If the copy/move operation involves the creation of a new site collection, you must be a farm administrator at the destination.