API Reference
Class
DelegationRecord
Access control entry affecting a privileged group, projected for analysis.
Inheritance
- Object
- DelegationRecord
Constructors
public DelegationRecord() #Inherited Methods
Properties
public String DomainName { get; set; } #DNS domain name.
public String GroupSam { get; set; } #Group sAMAccountName.
public String GroupDn { get; set; } #Group distinguished name.
public String Sid { get; set; } #SID string of the trustee.
public String Identity { get; set; } #Displayable identity for the trustee (name/UPN when available).
public ActiveDirectoryRights Rights { get; set; } #Allowed rights granted by the ACE (subset relevant to control paths).
public Boolean IsInherited { get; set; } #True when the ACE is inherited.
public AclOperationKind OperationKind { get; set; } #Derived coarse operation classification for this ACE (e.g., Write, ModifyDacl, ModifyOwner, CreateOrDeleteChild, Delete, Read).
public Boolean HasWrite { get; set; } #True when the ACE conveys any write/control capability.
public String WriteRights { get; set; } #Display‑friendly subset of write bits (excludes read/extended rights).
public AclRiskLevel RiskLevel { get; set; } #Risk level for this ACE based on rights/extended‑right context.
public String RiskReason { get; set; } #Short reason behind RiskLevel.