Permissions

Commands

icacls <file>	For file or directory
Get-Acl <Path\FileName>	Detailed permissions
Get-Acl <Path\FileName> | Select-Object -ExpandProperty Access	Detailed access rights for each trustee of the file

Permissions Explained

(OI): Object Inherit - This ACE (Access Control Entry) is inherited by files.

(CI): Container Inherit - This ACE is inherited by directories.

(IO): Inherit Only - This ACE does not apply to the current file/directory.

(NP): No Propagate - This ACE is not propagated to child objects.

(I): Inherited - The ACE was inherited from the parent container's ACL.

F: Full Control - The trustee can read, write, execute, change permissions, and take ownership of the file or directory.

M: Modify - The trustee can read, write, execute, and delete the file or directory.

RX: Read & Execute - The trustee can read and execute the file or directory.

R: Read - The trustee can read the contents of the file or directory but cannot make any changes.

W: Write - The trustee can write to the file or directory but cannot read its contents.