ACE
An ACE (access control entry) is an entry of an access control list (ACL) for a single subject (name of a user, user group or role name). Each access control entry contains: * A security identifier (SID) that represents a specific user or group * Bit flags that decide whether subordinate objects can inherit the ACE * A flag that specifies the type of ACE * An access mask that describes the authorizations in detail