Account Object Access Rights

The Account Object Access Rights type has the following access types.

Access type	Description
ACCOUNT_VIEW	This access type is required to read the account information. This includes the privileges assigned to the account, memory quotas assigned, and any special access types granted.
ACCOUNT_ADJUST_PRIVILEGES	This access type is required to assign privileges to or remove privileges from an account.
ACCOUNT_ADJUST_QUOTAS	This access type is required to change the system quotas assigned to an account.
ACCOUNT_ADJUST_SYSTEM_ACCESS	This access type is required to update the system access flags for the account.

 

Generic Access Masks

The Account object publishes the following mappings from generic access types to specific access types.

    GENERIC_READ        STANDARD_RIGHTS_READ |
                        ACCOUNT_VIEW 
            
    GENERIC_WRITE       STANDARD_RIGHTS_WRITE |
                        ACCOUNT_ADJUST_PRIVILEGES |
                        ACCOUNT_ADJUST_QUOTAS |
                        ACCOUNT_ADJUST_SYSTEM_ACCESS

    GENERIC_EXECUTE        STANDARD_RIGHTS_EXECUTE

Standard Access Types

This object does not support the (optional) SYNCHRONIZE standard access type. All required access types are supported. The mask of all supported access types for this object type is as follows.

    ACCOUNT_ALL_ACCESS  STANDARD_RIGHTS_REQUIRED |
                        ACCOUNT_VIEW |
                        ACCOUNT_ADJUST_PRIVILEGES |    
                        ACCOUNT_ADJUST_QUOTAS |
                        ACCOUNT_ADJUST_SYSTEM_ACCESS