<!--
{
  "availability" : [
    "macCatalyst: -",
    "macOS: -"
  ],
  "documentType" : "symbol",
  "framework" : "EndpointSecurity",
  "identifier" : "/documentation/EndpointSecurity/ES_EVENT_TYPE_AUTH_IOKIT_OPEN",
  "metadataVersion" : "0.1.0",
  "role" : "Global Variable",
  "symbol" : {
    "kind" : "Global Variable",
    "modules" : [
      "Endpoint Security"
    ],
    "preciseIdentifier" : "c:@EA@es_event_type_t@ES_EVENT_TYPE_AUTH_IOKIT_OPEN"
  },
  "title" : "ES_EVENT_TYPE_AUTH_IOKIT_OPEN"
}
-->

# ES_EVENT_TYPE_AUTH_IOKIT_OPEN

An identifier for a process that requests permission from the operating system to open an IOKit device.

```
var ES_EVENT_TYPE_AUTH_IOKIT_OPEN: es_event_type_t { get }
```

## Discussion

This identifier represents a call to <doc://com.apple.documentation/documentation/iokit/1514515-ioserviceopen>. This value corresponds to the [`es_events_t`](/documentation/EndpointSecurity/es_events_t) union member [`iokit_open`](/documentation/EndpointSecurity/es_events_t/iokit_open), which has the type [`es_event_iokit_open_t`](/documentation/EndpointSecurity/es_event_iokit_open_t).

---

Copyright &copy; 2026 Apple Inc. All rights reserved. | [Terms of Use](https://www.apple.com/legal/internet-services/terms/site.html) | [Privacy Policy](https://www.apple.com/privacy/privacy-policy)