ACE

An ACE is an access control entry in an access control list (ACL).

The following table lists the currently defined ACE types.

ACE type Structure ACL type
  • Access allowed
[ACCESS_ALLOWED_ACE](/windows/desktop/api/Winnt/ns-winnt-_access_allowed_ace) Discretionary
  • Access allowed
  • Allows callback during access check
[ACCESS_ALLOWED_CALLBACK_ACE](/windows/desktop/api/Winnt/ns-winnt-_access_allowed_callback_ace) Discretionary
  • Access allowed
  • Object specific
[ACCESS_ALLOWED_OBJECT_ACE](/windows/desktop/api/Winnt/ns-winnt-_access_allowed_object_ace) Discretionary
  • Access allowed
  • Object specific
  • Allows callback during access check
[ACCESS_ALLOWED_CALLBACK_OBJECT_ACE](/windows/desktop/api/Winnt/ns-winnt-_access_allowed_callback_object_ace) Discretionary
  • Access denied
[ACCESS_DENIED_ACE](/windows/desktop/api/Winnt/ns-winnt-_access_denied_ace) Discretionary
  • Access denied
  • Allows callback during access check
[ACCESS_DENIED_CALLBACK_ACE](/windows/desktop/api/Winnt/ns-winnt-_access_denied_callback_ace) Discretionary
  • Access denied
  • Object specific
  • Allows callback during access check
[ACCESS_DENIED_CALLBACK_OBJECT_ACE](/windows/desktop/api/Winnt/ns-winnt-_access_denied_callback_object_ace) Discretionary
  • Access denied
  • Object specific
[ACCESS_DENIED_OBJECT_ACE](/windows/desktop/api/Winnt/ns-winnt-_access_denied_object_ace) Discretionary
  • System alarm
[SYSTEM_ALARM_ACE](/windows/desktop/api/Winnt/ns-winnt-_system_alarm_ace) System
  • System alarm
  • Allows callback during access check
[SYSTEM_ALARM_CALLBACK_ACE](/windows/desktop/api/Winnt/ns-winnt-_system_alarm_callback_ace) System
  • System alarm
  • Object specific
  • Allows callback during access check
[SYSTEM_ALARM_CALLBACK_OBJECT_ACE](/windows/desktop/api/Winnt/ns-winnt-_system_alarm_callback_object_ace) System
  • System alarm
  • Object specific
[SYSTEM_ALARM_OBJECT_ACE](https://msdn.microsoft.com/en-us/library/Aa379615(v=VS.85).aspx) System
  • System audit
[SYSTEM_AUDIT_ACE](/windows/desktop/api/Winnt/ns-winnt-_system_audit_ace) System
  • System audit
  • Allows callback during access check
[SYSTEM_AUDIT_CALLBACK_ACE](/windows/desktop/api/Winnt/ns-winnt-_system_audit_callback_ace) System
  • System audit
  • Object specific
  • Allows callback during access check
[SYSTEM_AUDIT_CALLBACK_OBJECT_ACE](/windows/desktop/api/Winnt/ns-winnt-_system_audit_callback_object_ace) System
  • System audit
  • Object specific
[SYSTEM_AUDIT_OBJECT_ACE](/windows/desktop/api/Winnt/ns-winnt-_system_alarm_object_ace) System

System-alarm and object-specific system-alarm ACEs are not currently supported.

Note

Each ACE starts with an ACE_HEADER structure. The format of the data following the header varies according to the ACE type specified in the header.

Requirements

Minimum supported client
Windows XP [desktop apps only]
Minimum supported server
Windows Server 2003 [desktop apps only]
Header
Winnt.h (include Windows.h)

See also

AddAce

ACCESS_ALLOWED_ACE

ACCESS_DENIED_ACE

ACL

SYSTEM_ALARM_ACE

SYSTEM_AUDIT_ACE