An ACE is an access control entry and represents a single right within RT's ACL system. Generally, ACEs are referred to by the specific right name, such as CreateTicket, TakeTicket, or Watch.