Currently, rights assignments only accept principal names (i.e. Administrators, Users) and does not allow direct SID assignments. Unfortunately, this causes issues when supporting multiple languages because some languages the principal names are different (i.e. Administradores, SYSTÈME, Todos, etc.). To fix this, I suggest the ability to declare SIDs directly (i.e. S-1-5-32-544, S-1-1-0) for windows resources.