authz.h header

This header is used by Security and Identity. For more information, see:

• Security and Identity

authz.h contains the following programming interfaces:

Functions

AuthzAccessCheck Determines which access bits can be granted to a client for a given set of security descriptors.
AuthzAddSidsToContext Creates a copy of an existing context and appends a given set of security identifiers (SIDs) and restricted SIDs.
AuthzCachedAccessCheck Performs a fast access check based on a cached handle containing the static granted bits from a previous AuthzAccessCheck call.
AuthzEnumerateSecurityEventSources Retrieves the registered security event sources that are not installed by default.
AuthzFreeAuditEvent Frees the structure allocated by the AuthzInitializeObjectAccessAuditEvent function.
AuthzFreeCentralAccessPolicyCache Decreases the CAP cache reference count by one so that the CAP cache can be deallocated.
AuthzFreeContext Frees all structures and memory associated with the client context. The list of handles for a client is freed in this call.
AuthzFreeHandle Finds and deletes a handle from the handle list.
AuthzFreeResourceManager Frees a resource manager object.
AuthzGetInformationFromContext Returns information about an Authz context.
AuthzInitializeCompoundContext Creates a user-mode context from the given user and device security contexts.
AuthzInitializeContextFromAuthzContext Creates a new client context based on an existing client context.
AuthzInitializeContextFromSid Creates a user-mode client context from a user security identifier (SID).
AuthzInitializeContextFromToken Initializes a client authorization context from a kernel token. The kernel token must have been opened for TOKEN_QUERY.
AuthzInitializeObjectAccessAuditEvent Initializes auditing for an object.
AuthzInitializeObjectAccessAuditEvent2 Allocates and initializes an AUTHZ_AUDIT_EVENT_HANDLE handle for use with the AuthzAccessCheck function.
AuthzInitializeRemoteResourceManager Allocates and initializes a remote resource manager. The caller can use the resulting handle to make RPC calls to a remote instance of the resource manager configured on a server.
AuthzInitializeResourceManager Uses Authz to verify that clients have access to various resources.
AuthzInitializeResourceManagerEx Allocates and initializes a resource manager structure.
AuthzInstallSecurityEventSource Installs the specified source as a security event source.
AuthzModifyClaims Adds, deletes, or modifies user and device claims in the Authz client context.
AuthzModifySecurityAttributes Modifies the security attribute information in the specified client context.
AuthzModifySids Adds, deletes, or modifies user and device groups in the Authz client context.
AuthzOpenObjectAudit Reads the system access control list (SACL) of the specified security descriptor and generates any appropriate audits specified by that SACL.
AuthzRegisterCapChangeNotification Registers a CAP update notification callback.
AuthzRegisterSecurityEventSource Registers a security event source with the Local Security Authority (LSA).
AuthzReportSecurityEvent Generates a security audit for a registered security event source.
AuthzReportSecurityEventFromParams Generates a security audit for a registered security event source by using the specified array of audit parameters.
AuthzSetAppContainerInformation Sets the app container and capability information in a current Authz context.
AuthzUninstallSecurityEventSource Removes the specified source from the list of valid security event sources.
AuthzUnregisterCapChangeNotification Removes a previously registered CAP update notification callback.
AuthzUnregisterSecurityEventSource Unregisters a security event source with the Local Security Authority (LSA).

Structures

AUTHZ_ACCESS_REPLY Defines an access check reply.
AUTHZ_ACCESS_REQUEST Defines an access check request.
AUTHZ_INIT_INFO Defines the initialization information for the resource manager.
AUTHZ_REGISTRATION_OBJECT_TYPE_NAME_OFFSET Specifies the offset of a registration object type name.
AUTHZ_RPC_INIT_INFO_CLIENT Initializes a remote resource manager for a client.
AUTHZ_SECURITY_ATTRIBUTE_FQBN_VALUE Specifies a fully qualified binary name value associated with a security attribute.
AUTHZ_SECURITY_ATTRIBUTE_OCTET_STRING_VALUE Specifies an octet string value for a security attribute.
AUTHZ_SECURITY_ATTRIBUTE_V1 Defines a security attribute that can be associated with an authorization context.
AUTHZ_SECURITY_ATTRIBUTES_INFORMATION Specifies one or more security attributes and values.
AUTHZ_SOURCE_SCHEMA_REGISTRATION Specifies information about source schema registration.

Enumerations

AUTHZ_CONTEXT_INFORMATION_CLASS Specifies the type of information to be retrieved from an existing AuthzClientContext. This enumeration is used by the AuthzGetInformationFromContext function.
AUTHZ_SECURITY_ATTRIBUTE_OPERATION Indicates the type of modification to be made to security attributes by a call to the AuthzModifySecurityAttributes function.
AUTHZ_SID_OPERATION Indicates the type of SID operations that can be made by a call to the AuthzModifySids function.