Directory Services

Setting Permissions on a Group of Properties

Permissions can also be applied to a group of properties. A property set is identified by the GUID in the rightsGUID attribute of a controlAccessRight object. This GUID is set in the attributeSecurityGUID attribute of the attributeSchema object of each attribute in the group.

To set permissions that apply to a group of properties in an object, perform the following steps:

For a code example that demonstrates how to set access rights for a proeprty set, see Example Code for Setting Permissions on a Group of Properties.

For a discussion of the steps for creating an ACE, see Setting Access Rights on an Object.

For additional C++ and Visual Basic sample code for setting an ACE for a property set, see Example Code for Setting an ACE on a Directory Object.