An Extended PAC available in DCE 1.1 and newer versions, that can contain specified ERAs in addition to the principal's identity and group memberships. A delegation chain is expressed by concatenating the EPACs fro the series of principals involved in an operation. See Privilege (Authorisation) Service (PS) .