| Class | Contains | To |
| NotesDatabase | ACL property | Access a NotesACL object |
 | CurrentAccessLevel property | Determine the current user access level |
| GrantAccess, RevokeAccess, QueryAccess, QueryAccessPrivileges, and QueryAccessRoles methods | Directly create, remove, and check ACL entries |
| NotesACL | GetEntry, GetFirstEntry, and GetNextEntry methods | Access ACL entries |
| CreateACLEntry method | Create ACL entries |
| RemoveACLEntry method | Remove ACL entries in COM only |
| AdministrationServer | Determine and set name of administration server |
| IsAdminNames, IsAdminReaderAuthor | Determine administration access to Names, Authors, and Readers fields |
| InternetLevel property | Determine and set the maximum Internet access level for the current database |
| Roles property and AddRole, DeleteRole, and RenameRole methods | Access roles |
| Parent property | Determine the database that owns the ACL |
| UniformAccess property | Enforce, or not enforce, a consistent ACL across all replicas of a database |
| IsExtendedAccess property | Enable, or not enable, extended access |
| NotesACLEntry | CanCreateDocuments, CanCreateLSOrJavaAgent, CanCreatePersonalAgent, CanCreatePersonalFolder, CanCreateSharedFolder, CanDeleteDocuments, CanReplicateOrCopyDocuments, IsAdminReaderAuthor, IsAdminServer, Level, Name, and Parent properties | Examine the ACL entry |
| NameObject property | Supported in COM only |
| New and Remove methods | Create and remove an entry |
| Roles property and IsRoleEnabled, EnableRole, and DisableRole methods | Associate ACL entries with roles |
| IsPublicReader and IsPublicWriter properties | Become public readers and writers |
| IsGroup, IsPerson, and IsServer properties | Determine and set the user type for an ACL entry |