Permission Required to Change ACLs on Registry Objects
The following figure shows the permissions that are required to change ACLs on registry objects.
Permission Required to Change ACLs on Registry Objects
To modify ACLs on registry objects, you must have the c permission on the object whose ACL you are changing. The registry object can be the policy object or a principal, group, or organization.