TestimoX

API Reference

Class

OuDelegationRecord

Namespace ADPlayground.Delegation
Assembly ADPlayground
Modifiers sealed

Access control entry affecting an organizational unit, projected for analysis.

Inheritance

  • Object
  • OuDelegationRecord

Constructors

Properties

public String DomainName { get; set; } #

DNS domain name.

public String OuDn { get; set; } #

Distinguished name of the OU.

public String Sid { get; set; } #

SID string of the trustee.

public String Identity { get; set; } #

Displayable identity for the trustee (name/UPN when available).

public ActiveDirectoryRights Rights { get; set; } #

Allowed rights granted by the ACE (subset relevant to control paths).

public Boolean IsInherited { get; set; } #

True when the ACE is inherited.

public IdentityType IdentityType { get; set; } #

Resolved identity type for the trustee (user, group, computer, etc.).

public Nullable<Guid> ObjectTypeGuid { get; set; } #

Optional objectType GUID (when ACE targets a specific extended right or property set).

public String ObjectTypeName { get; set; } #

Friendly name for ObjectTypeGuid when resolvable.

public AclOperationKind OperationKind { get; set; } #

Derived coarse operation classification for this ACE (e.g., Write, ModifyDacl, ModifyOwner, CreateOrDeleteChild, Delete, Read).

public Boolean HasWrite { get; set; } #

True when the ACE conveys any write/control capability.

public String WriteRights { get; set; } #

Display‑friendly subset of write bits (excludes read/extended rights).

public AclRiskLevel RiskLevel { get; set; } #

Risk level for this ACE based on rights/extended‑right context.

public String RiskReason { get; set; } #

Short reason behind RiskLevel.