Protected Resource Tables

When  intercepts an authorization request, it checks if the resource to which access is requested is listed in the protected resource tables in the kernel.
capamsc141
When 
Privileged Access Manager
intercepts an authorization request, it checks if the resource to which access is requested is listed in the protected resource tables in the kernel.
If the resource is listed in the protected resource tables, 
Privileged Access Manager
always sends an authorization request to the 
Privileged Access Manager
engine. If the resource is not listed in the protected resource table, 
Privileged Access Manager
may not send an authorization request to the engine but instead resolve the access request in the kernel.