Adding New Rights

In addition to the built-in, or predefined system rights that appear in Windows NT’s User Manager (or User Manager for Domains), you can create new rights of various types if your application requires them. Rights are stored in a bit field, so individual rights are checked using bit masks and constants.

There are three types of rights:

Standard rights Those where the assigned bit means the same, or approximately the same thing, across any objects that use them.
Specific rights Those that could use the same bit values in different objects, but mean different things for different objects. These are the type you would use to define some completely new right that does not have much in common with already existing (predefined) rights.
Generic rights Rights with very broad meanings, which can be interpreted somewhat differently by different applications. Generic rights can be mapped to specific and standard rights, where there is some similarity of meaning between the name of the general right and the functionality being mapped to it.