Microsoft-specific authorization data present in the authorization data field of a ticket, it contains several logical components including group membership, alternate credentials for non-Kerberos authentication protocols and policy control information.