By default, the system USES the primary token when a thread of the process interacts with a securable object.
fellowships securable by promising college graduates
Impersonation allows the thread to interact with securable objects using the client's security context.
