> ## Documentation Index
> Fetch the complete documentation index at: https://bloodhound.specterops.io/llms.txt
> Use this file to discover all available pages before exploring further.

# WriteOwnerLimitedRights

> When specific privileges on an object's DACL are explicitly granted to the `OWNER RIGHTS` SID (S-1-3-4), and inheritance is configured for those permissions, they are inherited by the new object owner after a change in ownership. In this case, implicit owner rights are blocked, and the new owner is granted only the specific inherited privileges granted to `OWNER RIGHTS`.

<img noZoom src="https://mintcdn.com/specterops/tTIczgde9H07oLXf/assets/enterprise-AND-community-edition-pill-tag.svg?fit=max&auto=format&n=tTIczgde9H07oLXf&q=85&s=ad49a576589f4d2a8081df77d07fdf56" alt="Applies to BloodHound Enterprise and CE" width="482" height="45" data-path="assets/enterprise-AND-community-edition-pill-tag.svg" />

## Abuse Info

Please refer to the abuse info section in the [edge documentation](/resources/edges/overview.mdx) for the specific privilege granted.

## Opsec Considerations

Please refer to the OPSEC section in the [edge documentation](/resources/edges/overview.mdx) for the specific privilege granted.

## Edge Schema

Source: [User](/resources/nodes/user), [Group](/resources/nodes/group), [Computer](/resources/nodes/computer)\
Destination: [AIACA](/resources/nodes/aiaca), [CertTemplate](/resources/nodes/cert-template), [Computer](/resources/nodes/computer), [Container](/resources/nodes/container), [Domain](/resources/nodes/domain), [EnterpriseCA](/resources/nodes/enterprise-ca), [Group](/resources/nodes/group), [GPO](/resources/nodes/gpo), [IssuancePolicy](/resources/nodes/issuance-policy), [NTAuthStore](/resources/nodes/nt-auth-store), [OU](/resources/nodes/ou), [RootCA](/resources/nodes/root-ca), [User](/resources/nodes/user)\
Traversable: **Yes**

## References

* [SpecterOps: Do You Own Your Permissions, or Do Your Permissions Own You?](https://specterops.io/blog/2025/03/26/do-you-own-your-permissions-or-do-your-permissions-own-you/)
* [Trimarc Whitepaper: Owner or Pwnd?](https://www.hub.trimarcsecurity.com/post/trimarc-whitepaper-owner-or-pwnd)
* [GitHub: Owner or Pwned?](https://github.com/JimSycurity/OwnerOrPwned)
