Access Control Entry (ACE)
Technology› Operating System› Microsoft Windows› Microsoft Windows Server
Microsoft Active Directory
In Windows-based systems, an entry in an access control list containing the security identifier for a user or group and an access mask that specifies which operations by the user or group are allowed, denied, or audited. All objects in the Active Directory are protected by a security descriptor – the security descriptor contains an access control list which contains access control entries (ACEs) – these ACEs collectively specify the set of permissions that various security principals (users, groups, computers) have on that object.
An entry in an object's discretionary access control list (DACL) that grants permissions to a user or group. An ACE is also an entry in an object's system access control list (SACL) that specifies the security events to be audited for a user or group.