Access control entry (ACE)
An entry in either a securable item’s discretionary access control list (DACL) or an item’s system access control list (SACL). In a DACL, the entry grants or denies permissions to a user or group. In a SACL, the entry identifies which security events to audit for a certain user or group or controls the Windows Integrity Level for the item.
