2.2.1.5 Group ACCESS_MASK Values
These are the specific values available to describe the access control on a group object. A bitwise OR operation can be performed on these values, along with values from section 2.2.1.1. For more information on the message processing of these values, see section 3.1.5.1.6.
Constant/value |
Description |
---|---|
GROUP_READ_INFORMATION 0x00000001 |
Specifies the ability to read various attributes. |
GROUP_WRITE_ACCOUNT 0x00000002 |
Specifies the ability to write various attributes, not including the member attribute. |
GROUP_ADD_MEMBER 0x00000004 |
Specifies the ability to add a value to the member attribute. |
GROUP_REMOVE_MEMBER 0x00000008 |
Specifies the ability to remove a value from the member attribute. |
GROUP_LIST_MEMBERS 0x00000010 |
Specifies the ability to read the values of the member attribute. |
GROUP_ALL_ACCESS 0x000F001F |
The specified accesses for a GENERIC_ALL request. |
GROUP_READ 0x00020010 |
The specified accesses for a GENERIC_READ request. |
GROUP_WRITE 0x0002000E |
The specified accesses for a GENERIC_WRITE request. |
GROUP_EXECUTE 0x00020001 |
The specified accesses for a GENERIC_EXECUTE request. |