A grant is represented by an ACE. An ACE is the specific access gratned on a target.