Specifies the Object ID of the Azure Active Directory User or Group that the entry relates to. Only valid for user or group entries.
user
group
Specifies whether the ACE represents an access entry or a default entry. Default value is access.
access
default
Specifies the type of entry. Can be user, group, mask or other.
mask
other