An access mask is a 32-bit value that specifies which operations by the user or group are allowed, denied, or audited in an access control entry (ACE) of an access control list (ACL). It is also used to request access rights when an object is opened.