Identifies a security trustee (a user or a group) referenced by an access control entry, an effective-rights query, or a trustee-lookup result.

Implements

Constructors

Properties

accountName?: string

The trustee's account name. On input it may be supplied instead of Sid to address the trustee by name (resolved to a SID server-side); the SID wins when both are given. Always populated on output.

displayName?: string

A human-readable display name. Populated by trustee-lookup results; omitted in access-control-entry contexts.

isDisabled?: boolean

True when the trustee account is disabled. Populated by trustee-lookup results.

isUser?: boolean

True when the trustee is an individual user; false when it is a group.

sid?: string

The trustee's security identifier (an SDDL string such as S-1-5-21-...). This is the canonical, stable id for a trustee. On input it is preferred and takes precedence over AccountName; always populated on output.

trusteeType?: string

The trustee type: one of LaserficheUser, LaserficheGroup, WindowsAccount, LdapAccount, LfdsAccount.

Methods