3.1.1.2 Accounts Rights Data Model

Account Rights is composed of two submodels, Privilege and System Access Rights. When used with account objects, they can be used separately in messages, as in LsarEnumeratePrivileges and LsarGetSystemAccessAccount, or together, as in LsarAddAccountRights. The Name fields in the following data models are used to identify the privilege or system access right uniquely.