Active Directory

AddAllowedToAct

AddKeyCredentialLink

AddMember

ADMIN_TO

AllExtendedRights

ALLOWED_TO_DELEGATE

AllowedToAct

CAN_EXEC_DCOM

CAN_EXEC_PWSH

CAN_RDP

CanReadGMSAPassword

CertificateAutoenrollment

CertificateEnrollment

CreateAny

CreateComputer

CreateDNSNode

CreateUser

DCSync

DUMP_SMSA_PASSWORD

ForceChangePassword

GenericAll

GenericWrite

GPLINK

GPOWrite

HAS_CA

HAS_SESSION

HAS_SPN

IN_GPO

IN_GROUP

IN_LOCALGROUP

LAPSPassword

ManageCA

ManageCertificates

ManageGPLink

Owner

PARENT_OU

ReadLAPSv2Password

SelfMembership

SIDHistory

SQLAdmin

SyncLAPSPassword

TRUSTED_BY

Write

WriteAccountRestrictions

WriteAltSecurityIdentities

WriteCertificateApplicationPolicy

WriteCertificateNameFlag

WriteCertificateTemplates

WriteDACL

WriteEnrollmentFlag

WriteOverCertificateTemplate

WriteOwner

WritePublicInformation

WriteRASignature

writeSPN