com.apple.app-sandbox.set-attributes - Overview of the macOS Authorization Right
macOS 10.14
{
'class' : 'rule',
'comment' : 'Authorize an app-sandboxed application to change permissions on a privileged file.',
'rule' : [
'authenticate-admin-nonshared'
]
}