Access-Control Entries that is used to build Access-Control Lists (ACLs).

Each ACE contains the following information:

* A SID, that identifies the trustee. A trustee can be a user account, group account, or a logon account for a program such as a Windows NT service.

* An access mask specifying access rights controlled by the ACE.

* Flags that indicates the type of ACE and flags that determine whether other objects or containers can inherit the ACE from the primary object to which the ACL is attached.