2.2.1.5 Group ACCESS_MASK Values

These are the specific values available to describe the access control on a group object. A bitwise OR operation can be performed on these values, along with values from section 2.2.1.1. For more information on the message processing of these values, see section 3.1.5.1.6.

Constant/value

Description

GROUP_READ_INFORMATION

0x00000001

Specifies the ability to read various attributes.

GROUP_WRITE_ACCOUNT

0x00000002

Specifies the ability to write various attributes, not including the member attribute.

GROUP_ADD_MEMBER

0x00000004

Specifies the ability to add a value to the member attribute.

GROUP_REMOVE_MEMBER

0x00000008

Specifies the ability to remove a value from the member attribute.

GROUP_LIST_MEMBERS

0x00000010

Specifies the ability to read the values of the member attribute.

GROUP_ALL_ACCESS

0x000F001F

The specified accesses for a GENERIC_ALL request.

GROUP_READ

0x00020010

The specified accesses for a GENERIC_READ request.

GROUP_WRITE

0x0002000E

The specified accesses for a GENERIC_WRITE request.

GROUP_EXECUTE

0x00020001

The specified accesses for a GENERIC_EXECUTE request.