TokenAccessLevels TokenAccessLevels TokenAccessLevels TokenAccessLevels Enum


Defines the privileges of the user account associated with the access token.

This enumeration has a FlagsAttribute attribute that allows a bitwise combination of its member values.

public enum class TokenAccessLevels
public enum TokenAccessLevels
type TokenAccessLevels = 
Public Enum TokenAccessLevels


AdjustDefault AdjustDefault AdjustDefault AdjustDefault 128

The user can change the default owner, primary group, or discretionary access control list (DACL) of the token.

AdjustGroups AdjustGroups AdjustGroups AdjustGroups 64

The user can change the attributes of the groups in the token.

AdjustPrivileges AdjustPrivileges AdjustPrivileges AdjustPrivileges 32

The user can enable or disable privileges in the token.

AdjustSessionId AdjustSessionId AdjustSessionId AdjustSessionId 256

The user can adjust the session identifier of the token.

AllAccess AllAccess AllAccess AllAccess 983551

The user has all possible access to the token.

AssignPrimary AssignPrimary AssignPrimary AssignPrimary 1

The user can attach a primary token to a process.

Duplicate Duplicate Duplicate Duplicate 2

The user can duplicate the token.

Impersonate Impersonate Impersonate Impersonate 4

The user can impersonate a client.

MaximumAllowed MaximumAllowed MaximumAllowed MaximumAllowed 33554432

The maximum value that can be assigned for the TokenAccessLevels enumeration.

Query Query Query Query 8

The user can query the token.

QuerySource QuerySource QuerySource QuerySource 16

The user can query the source of the token.

Read Read Read Read 131080

The user has standard read rights and the Query privilege for the token.

Write Write Write Write 131296

The user has standard write rights and the AdjustPrivileges, AdjustGroups and AdjustDefault privileges for the token.

Applies to