---
title: Security entitlements
framework: bundleresources
role: collectionGroup
role_heading: API Collection
path: bundleresources/security-entitlements
---

# Security entitlements

Key-value pairs that grant an executable access to secure resources, or enable hardening checks.

## Topics

### Automation

- [Apple Events Entitlement](bundleresources/entitlements/com.apple.security.automation.apple-events.md)

### Networking

- [com.apple.security.network.server](bundleresources/entitlements/com.apple.security.network.server.md)
- [com.apple.security.network.client](bundleresources/entitlements/com.apple.security.network.client.md)
- [App Attest Environment](bundleresources/entitlements/com.apple.developer.devicecheck.appattest-environment.md)

### Device access

- [Audio Input Entitlement](bundleresources/entitlements/com.apple.security.device.audio-input.md)
- [Camera entitlement](bundleresources/entitlements/com.apple.security.device.camera.md)
- [com.apple.security.device.microphone](bundleresources/entitlements/com.apple.security.device.microphone.md)
- [com.apple.security.device.usb](bundleresources/entitlements/com.apple.security.device.usb.md)
- [com.apple.security.print](bundleresources/entitlements/com.apple.security.print.md)
- [com.apple.security.device.bluetooth](bundleresources/entitlements/com.apple.security.device.bluetooth.md)
- [com.apple.security.smartcard](bundleresources/entitlements/com.apple.security.smartcard.md)

### Personal information

- [Address book entitlement](bundleresources/entitlements/com.apple.security.personal-information.addressbook.md)
- [Location entitlement](bundleresources/entitlements/com.apple.security.personal-information.location.md)
- [Calendars entitlement](bundleresources/entitlements/com.apple.security.personal-information.calendars.md)
- [Photos Library Entitlement](bundleresources/entitlements/com.apple.security.personal-information.photos-library.md)

### Files and media

- [App Sandbox Entitlement](bundleresources/entitlements/com.apple.security.app-sandbox.md)
- [com.apple.security.files.user-selected.read-only](bundleresources/entitlements/com.apple.security.files.user-selected.read-only.md)
- [com.apple.security.files.user-selected.read-write](bundleresources/entitlements/com.apple.security.files.user-selected.read-write.md)
- [com.apple.security.files.downloads.read-only](bundleresources/entitlements/com.apple.security.files.downloads.read-only.md)
- [com.apple.security.files.downloads.read-write](bundleresources/entitlements/com.apple.security.files.downloads.read-write.md)
- [Privileged File Operations](bundleresources/entitlements/com.apple.developer.security.privileged-file-operations.md)
- [com.apple.security.assets.pictures.read-only](bundleresources/entitlements/com.apple.security.assets.pictures.read-only.md)
- [com.apple.security.assets.pictures.read-write](bundleresources/entitlements/com.apple.security.assets.pictures.read-write.md)
- [com.apple.security.assets.music.read-only](bundleresources/entitlements/com.apple.security.assets.music.read-only.md)
- [com.apple.security.assets.music.read-write](bundleresources/entitlements/com.apple.security.assets.music.read-write.md)
- [com.apple.security.assets.movies.read-only](bundleresources/entitlements/com.apple.security.assets.movies.read-only.md)
- [com.apple.security.assets.movies.read-write](bundleresources/entitlements/com.apple.security.assets.movies.read-write.md)
- [All files entitlement](bundleresources/entitlements/com.apple.security.files.all.md)
- [Data Protection Entitlement](bundleresources/entitlements/com.apple.developer.default-data-protection.md)

### Hardened runtime

- [Allow execution of JIT-compiled code entitlement](bundleresources/entitlements/com.apple.security.cs.allow-jit.md)
- [Allow Unsigned Executable Memory Entitlement](bundleresources/entitlements/com.apple.security.cs.allow-unsigned-executable-memory.md)
- [Allow DYLD environment variables entitlement](bundleresources/entitlements/com.apple.security.cs.allow-dyld-environment-variables.md)
- [Disable Library Validation Entitlement](bundleresources/entitlements/com.apple.security.cs.disable-library-validation.md)
- [Disable Executable Memory Protection Entitlement](bundleresources/entitlements/com.apple.security.cs.disable-executable-page-protection.md)
- [Debugging tool entitlement](bundleresources/entitlements/com.apple.security.cs.debugger.md)

### Hardened process

- [com.apple.security.hardened-process](bundleresources/entitlements/com.apple.security.hardened-process.md)
- [com.apple.security.hardened-process.enhanced-security-version](bundleresources/entitlements/com.apple.security.hardened-process.enhanced-security-version.md)
- [com.apple.security.hardened-process.enhanced-security-version-string](bundleresources/entitlements/com.apple.security.hardened-process.enhanced-security-version-string.md)
- [com.apple.security.hardened-process.hardened-heap](bundleresources/entitlements/com.apple.security.hardened-process.hardened-heap.md)
- [com.apple.security.hardened-process.platform-restrictions](bundleresources/entitlements/com.apple.security.hardened-process.platform-restrictions.md)
- [com.apple.security.hardened-process.platform-restrictions-string](bundleresources/entitlements/com.apple.security.hardened-process.platform-restrictions-string.md)
- [com.apple.security.hardened-process.dyld-ro](bundleresources/entitlements/com.apple.security.hardened-process.dyld-ro.md)
- [com.apple.security.hardened-process.no-guard-objects](bundleresources/entitlements/com.apple.security.hardened-process.no-guard-objects.md)

### Hardware memory tagging

- [com.apple.security.hardened-process.checked-allocations](bundleresources/entitlements/com.apple.security.hardened-process.checked-allocations.md)
- [com.apple.security.hardened-process.checked-allocations.soft-mode](bundleresources/entitlements/com.apple.security.hardened-process.checked-allocations.soft-mode.md)
- [com.apple.security.hardened-process.checked-allocations.enable-pure-data](bundleresources/entitlements/com.apple.security.hardened-process.checked-allocations.enable-pure-data.md)
- [com.apple.security.hardened-process.checked-allocations.no-tagged-receive](bundleresources/entitlements/com.apple.security.hardened-process.checked-allocations.no-tagged-receive.md)

### Application groups

- [App Groups Entitlement](bundleresources/entitlements/com.apple.security.application-groups.md)
- [Keychain Access Groups Entitlement](bundleresources/entitlements/keychain-access-groups.md)

## See Also

### Security

- [App Sandbox](security/app-sandbox.md)
- [Hardened Runtime](security/hardened-runtime.md)
- [Enabling enhanced security for your app](xcode/enabling-enhanced-security-for-your-app.md)