Glossary term
The security metadata attached to a securable object.
intermediate
Owners, DACL/SACL, ACE ordering, and the object-side policy Windows enforces.