ID attribute

Each user ACL entry and each group ACL entry have unique identifiers (name).

These names must represent valid users or groups that are created in a domain and have an account in the registry.

The any-other and unauthenticated special entry types do not use the ID attribute.