The order of access control elements in an access control list is the following: explicit Deny elements explicit Allow elements inherited Deny elements inherited Deny elements It is also called the canonical order.