Identity Specifiers: sid:sid - References the identity with the specified SID. Example: sid:S-1-5-21-2127521184-1604012920-1887927527-588340 ...

Identity Specifiers:

sid:sid - References the identity with the specified SID.
Example: sid:S-1-5-21-2127521184-1604012920-1887927527-588340

n:[domain\]name - References the identity with the specified name. For Windows, name is the logon name. If the referenced identity is in a domain, the domain name is required. For application groups, name is the group display name and domain is the URI or GUID of the containing project. In this context, if domain is omitted, the scope is assumed to be collection-level.
Example: To reference the identity of the user "John Peoples" in the domain "Datum1" at the fictitious company "A. Datum Corporation, you would use the following syntax:
n:DATUM1\jpeoples
Example: To reference application groups, you could use either of the following syntaxes:
n:"Full-time Employees"
n:00a10d23-7d45-4439-981b-d3b3e0b0b1ee\Vendors

adm:[scope] - References the administrative application group for the scope, such as "Team Foundation Administrators" for the instance-level, or "Project Collection Administrators" at the collection-level. The optional parameter scope is a project URI or URL, including its GUID and connection string. If scope is omitted, the server or collection scope is assumed based on whether the /server or /collection parameter is used, but the colon is still required.
Example: adm:vstfs:///Classification/TeamProject/GUID

srv: - References the application group for service accounts.

all: - References all groups and identities.

Identifier names must differ from keywords. To use this string as an identifier name, prefix it with the @ character. Example: ... Identifiers must be integers between 0 and 65535. Integers between -32768 and -1 will be converted to their bit-wise equivalent ... Identifiers which conflict in whole or in part with namespace names should be avoided. Names that describe the purpose or ... Identifiers which conflict with reserved language keywords should be avoided. Using a reserved keyword as an identifier makes ... Identity Specifiers: sid:sid - References the identity with the specified SID. Example: sid:S-1-5-21-2127521184-1604012920-1887927527-588340 ... If a COM registration method is provided, an unregistration method must also be provided to reverse the operations performed ... If a disposable object is not explicitly disposed before all references to it are out of scope, the object will be disposed ... If a function name contains "uri" or "url" or "urn" and the return type is string, the return type should be changed to System.Uri. ... If a method overloads another method by replacing a System.Uri parameter with a string, then the string overload should simply ...