The following functions are used to get and set the components of an object's security descriptor.
| GetNamedSecurityInfo | |
| GetSecurityInfo | |
| SetNamedSecurityInfo | |
| SetSecurityInfo | |
The following functions are used to manipulate access-control lists.
| BuildExplicitAccessWithName | |
| GetAuditedPermissionsFromAcl | |
| GetEffectiveRightsFromAcl | |
| GetExplicitEntriesFromAcl | |
| SetEntriesInAcl | |