authenticate-staff-extract

Authorisation Right in Mac OS X

The authenticate-staff-extract authorization right appears in the following versions of Mac OS X.

Mac OS X 10.10 / 10.11 / 10.12

  {
    'allow-root' : 'false',
    'authenticate-user' : 'true',
    'class' : 'user',
    'comment' : 'Authenticate as group staff + allow password to be extracted.',
    'extract-password' : 'true',
    'group' : 'staff',
    'password-only' : 'true',
    'require-apple-signed' : 'true',
    'session-owner' : 'false',
    'shared' : 'false',
    'timeout' : '0',
    'tries' : '10000',
    'version' : '1'
  }

See other Mac OS X Authorization Rights.