WindowsAccessControlRegistryKeyAccessRule

Parameters

Parameter	Attribute	DataType	Description	Allowed Values
AccessControlType	Key	System.Security.AccessControl.AccessControlType	Whether the entry is an allow or a deny entry.	Allow, Deny
AccessRights	Key	System.Security.AccessControl.RegistryRights	The exact registry rights the entry grants or denies.	QueryValues, SetValue, CreateSubKey, EnumerateSubKeys, Notify, CreateLink, Delete, ReadPermissions, WriteKey, ExecuteKey, ReadKey, ChangePermissions, TakeOwnership, FullControl
Account	Key	System.String	The principal the rule applies to. An alias is normalized by security identifier, so any spelling that resolves to the same principal matches.
AppliesTo	Key	System.String	The inheritance scope of the entry across the key and its subkeys.	ThisKeyOnly, ThisKeyAndSubkeys, SubkeysOnly, ThisKeyAndSubkeysOneLevel, SubkeysOnlyOneLevel
Path	Key	System.String	The registry key the rule applies to.
RegistryView	Key	WindowsRegistryView	The registry view the key is opened in. It is part of the key identity.	Default, Registry32, Registry64
Ensure	Write	WindowsAccessControlDscEnsure	Whether the exact entry must be present or absent. Defaults to Present.	Absent, Present
Reasons	Read	WindowsAccessControlDscReason[]	Returns why the resource is not in the desired state. Not configurable.

Description

The composite key identifies exactly one explicit access control entry by key path, registry view, account, rights, qualifier, and inheritance scope. Absent removes every duplicate of that exact entry without purging unrelated rights or the opposite qualifier.