12<\/strong> – App Type Policy<\/p>\n\n\n\nservice<\/h3>\n\n\n\n
It is possible to inspect the localizable strings for the tcc framework to determine what (some) of the valid services are. Using this command:<\/p>\n\n\n\n
plutil -p \/System\/Library\/PrivateFrameworks\/TCC.framework\/Resources\/en.lproj\/Localizable.strings<\/code><\/pre>\n\n\n\n…gives us the following list of services along with what the user will be prompted with when access is requested.<\/p>\n\n\n\n
\n- kTCCServiceAddressBook<\/strong> – client<\/em> would like to access your contacts.<\/li>\n\n\n\n
- kTCCServiceAppleEvents<\/strong> – client<\/em> wants access to control indirect_object<\/em>. Allowing control will provide access to documents and data in indirect_object<\/em>, and to perform actions within that app.<\/li>\n\n\n\n
- kTCCServiceBluetoothAlways<\/strong> – client<\/em> would like to use Bluetooth.<\/li>\n\n\n\n
- kTCCServiceCalendar<\/strong> – client<\/em> would like to access your calendar.<\/li>\n\n\n\n
- kTCCServiceCamera<\/strong> – client<\/em> would like to access the camera.<\/li>\n\n\n\n
- kTCCServiceContactsFull<\/strong> – client<\/em> would like to access all of your contacts information.<\/li>\n\n\n\n
- kTCCServiceContactsLimited<\/strong> – client<\/em> would like to access your contacts basic information.<\/li>\n\n\n\n
- kTCCServiceFileProviderDomain<\/strong> – client<\/em> wants to access files managed by indirect_object<\/em>.<\/li>\n\n\n\n
- kTCCServiceFileProviderPresence<\/strong> – Do you want to allow client<\/em> to see when you are using files managed by it? It will see which applications are used to access files and whether you are actively using them. It will not see when files that are not managed by it are accessed.<\/li>\n\n\n\n
- kTCCServiceLocation<\/strong> – client<\/em> would like to use your current location.<\/li>\n\n\n\n
- kTCCServiceMediaLibrary<\/strong> – client<\/em> would like to access Apple Music, your music and video activity, and your media library.<\/li>\n\n\n\n
- kTCCServiceMicrophone<\/strong> – client<\/em> would like to access the microphone.<\/li>\n\n\n\n
- kTCCServiceMotion<\/strong> – client<\/em> Would Like to Access Your Motion & Fitness Activity.<\/li>\n\n\n\n
- kTCCServicePhotos<\/strong> – client<\/em> Would Like to Access Your Photos<\/li>\n\n\n\n
- kTCCServicePhotosAdd<\/strong> – client<\/em> Would Like to Add to your Photos<\/li>\n\n\n\n
- kTCCServicePrototype3Rights<\/strong> – client<\/em> Would Like Authorization to Test Service Proto3Right.<\/li>\n\n\n\n
- kTCCServicePrototype4Rights<\/strong> – client<\/em> Would Like Authorization to Test Service Proto4Right.<\/li>\n\n\n\n
- kTCCServiceReminders<\/strong> – client<\/em> would like to access your reminders.<\/li>\n\n\n\n
- kTCCServiceScreenCapture<\/strong> – client<\/em> would like to capture the contents of the system display.<\/li>\n\n\n\n
- kTCCServiceSiri<\/strong> – Would You Like to Use client<\/em> with Siri?<\/li>\n\n\n\n
- kTCCServiceSpeechRecognition<\/strong> – client<\/em> Would Like to Access Speech Recognition.<\/li>\n\n\n\n
- kTCCServiceSystemPolicyDesktopFolder<\/strong> – client<\/em> would like to access files in your Desktop folder.<\/li>\n\n\n\n
- kTCCServiceSystemPolicyDeveloperFiles<\/strong> – client<\/em> would like to access a file used in Software Development.<\/li>\n\n\n\n
- kTCCServiceSystemPolicyDocumentsFolder<\/strong> – client<\/em> would like to access files in your Documents folder.<\/li>\n\n\n\n
- kTCCServiceSystemPolicyDownloadsFolder<\/strong> – client<\/em> would like to access files in your Downloads folder.<\/li>\n\n\n\n
- kTCCServiceSystemPolicyNetworkVolumes<\/strong> – client<\/em> would like to access files on a network volume.<\/li>\n\n\n\n
- kTCCServiceSystemPolicyRemovableVolumes<\/strong> – client<\/em> would like to access files on a removable volume.<\/li>\n\n\n\n
- kTCCServiceSystemPolicySysAdminFiles<\/strong> – client<\/em> would like to administer your computer. Administration can include modifying passwords, networking, and system settings.<\/li>\n\n\n\n
- kTCCServiceWillow<\/strong> – client<\/em> would like to access your Home data.<\/li>\n<\/ul>\n\n\n\n
Some other values(from running strings on tccd<\/strong> binary, observation, and other places online):<\/p>\n\n\n\n\n- kTCCServiceSystemPolicyAllFiles<\/strong> – Full Disk Access<\/li>\n\n\n\n
- kTCCServiceAccessibility – Allows app to control your computer<\/li>\n\n\n\n
- kTCCServicePostEvent<\/strong> – Allows to send keystrokes<\/li>\n\n\n\n
- kTCCServiceListenEvent<\/strong> – Input Monitoring; to monitor input from your keyboard<\/li>\n\n\n\n
- kTCCServiceDeveloperTool<\/strong> – Allows app to run software locally that do not meet the system\u2019s security policy<\/li>\n<\/ul>\n\n\n\n
These seem to be carry-overs from iOS, and may not apply on macOS:<\/p>\n\n\n\n
\n- kTCCServiceLiverpool<\/strong> – Related to location services<\/li>\n\n\n\n
- kTCCServiceUbiquity<\/strong> – Related to iCloud<\/li>\n\n\n\n
- kTCCServiceShareKit<\/strong> – Related to the share feature(presumably from iOS)(ShareKit<\/a>)<\/li>\n<\/ul>\n\n\n\n