An access mask is a 32 bit value with the bits as shown in the following table.
| Bits 31-28 | Bits 27-25 | Bit 24 | Bits 23-16 | Bits 15-0 |
| Generic rights | Reserved | System Access | Standard rights | Specific rights |
The following flags define system access and maximum allowed access.
| system_security | 0x01000000 | Access to the system access control list. |
| maximum_allowed | 0x02000000 | maximum allowed access. |
Access to the system access control list requires privileges.