# Module `netapp_ontap.models.acl`

Copyright © 2021 NetApp Inc. All rights reserved.

## Classes

`class AclSchema (*, only: typing.Union = None, exclude: typing.Union = (), many: bool = False, context: typing.Dict = None, load_only: typing.Union = (), dump_only: typing.Union = (), partial: typing.Union = False, unknown: str = None)`

  The fields of the Acl object

  ### Ancestors

  - netapp_ontap.resource.ResourceSchema
  - marshmallow.schema.Schema
  - marshmallow.base.SchemaABC

  ### Class variables

  `access GET POST PATCH`

    Specifies whether the ACL is for DACL or SACL. The available values are:

    - access_allow - DACL for allow access
    - access_deny - DACL for deny access
    - access_allowed_callback - CALLBACK for allowed access
    - access_denied_callback - CALLBACK for denied access
    - access_allowed_callback_object - CALLBACK OBJECT for allowed access
    - access_denied_callback_object - CALLBACK OBJECT for denied access
    - system_audit_callback - SYSTEM Audit Callback ace
    - system_audit_callback_object - SYSTEM Audit Callback Object ace
    - system_resource_attribute - SYSTEM Resource Attribute
    - system_scoped_policy_id - SYSTEM Scope Policy ID
    - audit_success - SACL for success access
    - audit_failure - SACL for failure access
    - audit_success_and_failure - SACL for both success and failure access

    Valid choices:

    - access_allow
    - access_deny
    - access_allowed_callback
    - access_denied_callback
    - access_allowed_callback_object
    - access_denied_callback_object
    - system_audit_callback
    - system_audit_callback_object
    - system_resource_attribute
    - system_scoped_policy_id
    - audit_failure
    - audit_success
    - audit_success_and_failure
  `advanced_rights GET POST PATCH`

    The advanced_rights field of the acl.

  `apply_to GET POST PATCH`

    The apply_to field of the acl.

  `inherited GET`

    Indicates whether or not the ACE flag is inherited.

    Example: true

  `rights GET POST PATCH`

    Specifies the access right controlled by the ACE for the account specified. The "rights" parameter is mutually exclusive with the "advanced_rights" parameter. If you specify the "rights" parameter, you can specify one of the following "rights" values:

    Valid choices:

    - no_access
    - full_control
    - modify
    - read_and_execute
    - read
    - write
  `user GET POST`

    Specifies the account to which the ACE applies. You can specify either name or SID.

    Example: S-1-5-21-2233347455-2266964949-1780268902-69304