| Name | Type | Description | Required |
|---|
| Append | YesNoType | | |
| ChangePermission | YesNoType | | |
| CreateChild | YesNoType | For a directory, the right to create a subdirectory. Only valid under a 'CreateFolder' parent. | |
| CreateFile | YesNoType | For a directory, the right to create a file in the directory. Only valid under a 'CreateFolder' parent. | |
| CreateLink | YesNoType | | |
| CreateSubkeys | YesNoType | | |
| Delete | YesNoType | | |
| DeleteChild | YesNoType | For a directory, the right to delete a directory and all the files it contains, including read-only files. Only valid under a 'CreateFolder' parent. | |
| Domain | String | | |
| EnumerateSubkeys | YesNoType | | |
| Execute | YesNoType | | |
| GenericAll | YesNoType | | |
| GenericExecute | YesNoType | | |
| GenericRead | YesNoType | specifying this will fail to grant read access | |
| GenericWrite | YesNoType | | |
| Notify | YesNoType | | |
| Read | YesNoType | | |
| ReadAttributes | YesNoType | | |
| ReadExtendedAttributes | YesNoType | | |
| ReadPermission | YesNoType | | |
| ServiceChangeConfig | YesNoType | Required to call the ChangeServiceConfig or ChangeServiceConfig2 function to change the service configuration. Only valid under a 'ServiceInstall' parent. | |
| ServiceEnumerateDependents | YesNoType | Required to call the EnumDependentServices function to enumerate all the services dependent on the service. Only valid under a 'ServiceInstall' parent. | |
| ServiceInterrogate | YesNoType | Required to call the ControlService function to ask the service to report its status immediately. Only valid under a 'ServiceInstall' parent. | |
| ServicePauseContinue | YesNoType | Required to call the ControlService function to pause or continue the service. Only valid under a 'ServiceInstall' parent. | |
| ServiceQueryConfig | YesNoType | Required to call the QueryServiceConfig and QueryServiceConfig2 functions to query the service configuration. Only valid under a 'ServiceInstall' parent. | |
| ServiceQueryStatus | YesNoType | Required to call the QueryServiceStatus function to ask the service control manager about the status of the service. Only valid under a 'ServiceInstall' parent. | |
| ServiceStart | YesNoType | Required to call the StartService function to start the service. Only valid under a 'ServiceInstall' parent. | |
| ServiceStop | YesNoType | Required to call the ControlService function to stop the service. Only valid under a 'ServiceInstall' parent. | |
| ServiceUserDefinedControl | YesNoType | Required to call the ControlService function to specify a user-defined control code. Only valid under a 'ServiceInstall' parent. | |
| Synchronize | YesNoType | | |
| TakeOwnership | YesNoType | | |
| Traverse | YesNoType | For a directory, the right to traverse the directory. By default, users are assigned the BYPASS_TRAVERSE_CHECKING privilege, which ignores the FILE_TRAVERSE access right. Only valid under a 'CreateFolder' parent. | |
| User | String | | Yes |
| Write | YesNoType | | |
| WriteAttributes | YesNoType | | |
| WriteExtendedAttributes | YesNoType | | |