A combination of full access token and filtered access token linked together by the local security authority (LSA) component of the operating system.