authentication variables for dynamic acl

I am trying to set up dynamic ACLs. The KB for this said you need to have the authentication or query action to get the "authentication variables" for the dynamic ACLs.

What is the authentication variable for a dynamic ACL?

How do I set the ACL in Active Directory? Please forgive this question, I'm a network guy, not a Active Directory guy, but I need to tell the AD admins where in the user account setting put the ACLs that I provide them.

Thanks, Mark