Authorization
Access token
- Stores in security information about security principal
- Security principal SID
- All group SIDs
- Session ID
- Enables fast user switching
- Session ID tells which processes to run in background
- Inheritance
- Given to all processes and threads owned by security principal