Account Object Access Rights
The Account Object Access Rights type has the following access types.
|ACCOUNT_VIEW||This access type is required to read the account information. This includes the privileges assigned to the account, memory quotas assigned, and any special access types granted.|
|ACCOUNT_ADJUST_PRIVILEGES||This access type is required to assign privileges to or remove privileges from an account.|
|ACCOUNT_ADJUST_QUOTAS||This access type is required to change the system quotas assigned to an account.|
|ACCOUNT_ADJUST_SYSTEM_ACCESS||This access type is required to update the system access flags for the account.|
Generic Access Masks
The Account object publishes the following mappings from generic access types to specific access types.
GENERIC_READ STANDARD_RIGHTS_READ | ACCOUNT_VIEW GENERIC_WRITE STANDARD_RIGHTS_WRITE | ACCOUNT_ADJUST_PRIVILEGES | ACCOUNT_ADJUST_QUOTAS | ACCOUNT_ADJUST_SYSTEM_ACCESS GENERIC_EXECUTE STANDARD_RIGHTS_EXECUTE
Standard Access Types
This object does not support the (optional) SYNCHRONIZE standard access type. All required access types are supported. The mask of all supported access types for this object type is as follows.
ACCOUNT_ALL_ACCESS STANDARD_RIGHTS_REQUIRED | ACCOUNT_VIEW | ACCOUNT_ADJUST_PRIVILEGES | ACCOUNT_ADJUST_QUOTAS | ACCOUNT_ADJUST_SYSTEM_ACCESS