The AUTHZ_SECURITY_ATTRIBUTE_OPERATION enumeration structure is used with the AuthzrModifyClaims operation (section 3.1.4.6) to identify operation types on a client context object.

 typedef enum _AUTHZ_SECURITY_ATTRIBUTE_OPERATION {
     AUTHZ_SECURITY_ATTRIBUTE_OPERATION_NONE = 0,
     AUTHZ_SECURITY_ATTRIBUTE_OPERATION_REPLACE_ALL = 1,
     AUTHZ_SECURITY_ATTRIBUTE_OPERATION_ADD = 2,
     AUTHZ_SECURITY_ATTRIBUTE_OPERATION_DELETE = 3,
     AUTHZ_SECURITY_ATTRIBUTE_OPERATION_REPLACE = 4
 } AUTHZ_SECURITY_ATTRIBUTE_OPERATION;
  

AUTHZ_SECURITY_ATTRIBUTE_OPERATION_NONE: No operation will be performed.

AUTHZ_SECURITY_ATTRIBUTE_OPERATION_REPLACE_ALL: The ImpersonationAccessToken on the specified client context will be replaced.

AUTHZ_SECURITY_ATTRIBUTE_OPERATION_ADD: A new claim will be added to the server's ImpersonationAccessToken associated with the specified client context.

AUTHZ_SECURITY_ATTRIBUTE_OPERATION_DELETE: An existing claim will be deleted from the ImpersonationAccessToken array associated with the specified client context if it is present in that array.

AUTHZ_SECURITY_ATTRIBUTE_OPERATION_REPLACE: An existing claim will be replaced in the ImpersonationAccessToken array associated with the specified client context if it is present in the array.