Security descriptor commands

You can use the following security descriptor commands modify SDs and make them readable by humans.

Command Description

add_sd_ace

Adds an access control entry to a security descriptor.

explain_sd

Converts a security description in SDDL format to a human-readable form.

remove_sd_ace

Removes an access control entry (ACE) from a security descriptor.

set_sd_owner

Sets the owner of a security descriptor.