API Reference
Class
AclRiskClassifier
Maps raw rights and extended-right context to a coarse risk level suitable for UI and policy decisions.
Inheritance
- Object
- AclRiskClassifier
Methods
public static ValueTuple<AclRiskLevel, String> Evaluate(ActiveDirectoryRights rights, AccessControlType type, Nullable<Guid> extendedRight, String extendedRightName) #Returns:
ValueTuple<AclRiskLevel, String>Evaluate risk for an ACE given rights, ACE type, and optional extended-right context.
Parameters
- rights System.DirectoryServices.ActiveDirectoryRights
- ActiveDirectoryRights granted by the ACE.
- type System.Security.AccessControl.AccessControlType
- Allow or Deny.
- extendedRight System.Nullable{System.Guid}
- Optional extended-right GUID (control access right or schema attribute GUID).
- extendedRightName System.String
- Optional friendly name for the extended right.
Returns
Tuple of risk level and short reason string.