<!ELEMENT descriptor-acl (#PCDATA)>

Parent: <item-descriptor>, <property>

The descriptor-acl element specifies the ACL that applies to the item or property specified by the enclosing item-descriptor tag or property tag. This ACL can contain any access right that applies to the item descriptor or property. The value attribute of the tag is an ACL string, using the syntax described in the ACL Syntax section.

<descriptor-acl value="Admin$role$administrators-group:list,read,write;