accessControlEntries

An access control entry grants or denies permission to an Active Directory group to enroll certificates for a template.