The upriv token contains use of privilege information. The fields are:
A token ID
A success/failure field indicating whether the use of privilege was successful (1 success, 0 failure)
The privilege being tested
The following figure shows a priv token.
A upriv token is displayed by praudit as follows:
use of privilege,failed use of priv,win_mac_write