What is an access control entry (ACE) ?

The Microsoft Windows 2000 Active Directory glossary states that “each ACE contains a security identifier (SID), which identifies the principal (user or group) to whom the ACE applies, and information on what type of access the ACE grants or denies.”