PowerShellAccessControl 模块 3.0 输出

PowerShellAccessControl Module 3.0 output

有谁知道下面Get-AccessControlEntry命令输出中"Applied To"下的O CC CO是什么意思?

PS> Get-ADUser tuser | Get-AccessControlEntry -ObjectAceType memberof -ActiveDirectoryRights ReadProperty

AceType        Principal                 AccessMask              InheritedFrom    AppliesTo  OnlyAppliesHere
-------        ---------                 ----------              -------------    ---------  ---------------
AccessAllowed  Prod\ADR-CanGet_memberOf  Read memberOf Property  <not inherited>  O CC CO    False

我会说它代表 Object, ChildContainers 和 ChildObjects.