AccessControlEntryType Enum


Specifies whether to allow, deny, or revoke access rights for a trustee.

public enum class AccessControlEntryType
public enum AccessControlEntryType
public enum AccessControlEntryType
type AccessControlEntryType = 
Public Enum AccessControlEntryType


Allow 1

An access-allowed entry that causes the new rights to be added to any existing rights the trustee has.

Deny 3

An access-denied entry that denies the specified rights in addition to any currently denied rights of the trustee.

Revoke 4

An entry that removes all existing allowed or denied rights for the specified trustee.

Set 2

An access-allowed entry that is similar to Allow, except that the new entry allows only the specified rights. Using it discards any existing rights, including all existing access-denied entries for the trustee.


When you use the AccessControlEntry class to specify a new access right for a trustee, you set its EntryType property to describe whether to grant the right or deny it. Furthermore, you can define whether the new right is appended to an existing list (if the trustee already exists in the context for which you are adding or removing access privileges) or if the new right overwrites and deletes any previously defined rights.

When creating a new Allow entry, there might be a preexisting Deny entry for the same trustee that takes precedence and must be addressed. Similarly, when creating a new Deny entry, there might be an existing Allow entry that takes precedence. For information about the order in which access rights are applied, see AccessControlList.

Applies to

See also