Specifies the information given to the server about the client, and how the server may represent, or impersonate, the client. Security impersonation levels govern the degree to which a server process can act on behalf of a client process.

Specifies whether the server is to be given a snapshot of the client's security context (called static tracking), or is to be continually updated to track changes to the client's security context (called dynamic tracking). Not all communication mechanisms support dynamic tracking; those that do not will default to static tracking.

Specifies whether the server may enable or disable privileges and groups that the client's security context may include.

Specifies the size, in bytes, of this structure.