Exposes three special principal types as string constants: #AUTHENTICATED-USERS, #CREATOR-OWNER and #REALM-USERS(qualifier). These principal types are not real directory service entities; they represent special pseudo-accounts.

The #AUTHENTICATED-USERS pseudo-account is a logical group, all of whose members are authenticated users.

The #CREATOR-OWNER principal is the pseudo-account granted to the user who creates an object. It is a placeholder for the future owner of an object. A specific set of permissions (ACL) is defined for this account. These permissions provide full control over the created object. When the ACL is actually used, the real identity of the user accessing the object is substituted and becomes the actual owner ID. This occurs in the following instances:

• When security templates are applied.
• When an object inherits security from a parent.
• When a security descriptor is initialized from the class's default instance security. An exception to this rule is when the object's DefaultInstanceOwner property is set to Null, in which case permissions from the default instance security that specify #CREATOR-OWNER as the grantee are ignored and not copied to the Permissions collection of the created object.

The #REALM-USERS(qualifier) principal is a pseudo-group whose members are all users that were found in the Realm specified by qualifier, which may be either that Realm's SymbolicName or its Id string.

<SerializableAttribute> _
Public Class SpecialPrincipal _
	Implements ISerializable

[SerializableAttribute]
public class SpecialPrincipal : ISerializable

[SerializableAttribute]
public ref class SpecialPrincipal : ISerializable

FileNet.Api.Constants.SpecialPrincipal = function();

Type.createClass(
	'FileNet.Api.Constants.SpecialPrincipal',
	null,
	ISerializable);