When a user is authenticated in the system and received a token, does this token contain information about what objects have access to?

Question

Access rights

Please explain after authentication on the received Token (Token) there is information about which objects the user has access to, and What is the DACL that is on the token is that the objects that the user is the Owner of the Owners
Please help to understand Thank you
in advance !!!

Answer 1

There are two things:
(1) authentication,
(2) authorization.
Don't confuse them. They are different even though they live side by side.
The first is about who you are and how you will prove that it is really you.
The second is about what you are allowed to do.

Answer 2

Google for "what is TGT" and "what is DACL".
No need to thank.