Win7 API to programmatically add a group to a security policy?

Question

I have found the API to add a group programmatically, the next logical step is to add this group to a security policy, such as "Create Global Objects".

What is the Win7 API to programmatically add a group to a security policy?

Answer 1

How To Manage User Privileges Programmatically in Windows NT

To look up the SID for a group, use LsaLookupNames