PuppetACL

ACL_ACE_Split

acl { 'c:/windows/temp/some_dir':
  inherit => true,
  purge => false,
}

ace { 
 ensure => present,
 acl => ACL ['c:/windows/temp/some_dir'],
 identity => 'bob',
 rights => 'modify',
 type => 'allow',
 inherit => 'inherit_all',
 propagate => 'propagate_all',
}

ace { 
 ensure => present,
 acl => ACL ['c:/windows/temp/some_dir'],
 identity => 'tim',
 rights => 'read_execute',
}

ACL_ACE_Together

acl { 'c:/windows/temp/some_dir':
  inherit => true,
  purge => false,
  permissions => [
    ['bob','modify','allow','inherit_all','propagate_all],
    ['tim','read_execute']
  ],
}