Glossary term
A privilege must often be enabled on the thread before use.
intermediate
Special capabilities in a token beyond normal DACL rights.