app-specific-admin - Overview of the macOS Authorization Right
macOS 10.9 / 10.10 / 10.11 / 10.12 / 10.13 / 10.14
{
'allow-root' : 'false',
'authenticate-user' : 'true',
'class' : 'user',
'group' : 'admin',
'session-owner' : 'false',
'shared' : 'false',
'timeout' : '2147483647',
'tries' : '10000'
}
macOS 10.8
{
'class' : 'user',
'group' : 'admin'
}