<!--
{
  "availability" : [
    "macOS: 27.0.0 -"
  ],
  "documentType" : "symbol",
  "framework" : "EndpointSecurity",
  "identifier" : "/documentation/EndpointSecurity/es_exec_entitlements(_:)",
  "metadataVersion" : "0.1.0",
  "role" : "Function",
  "symbol" : {
    "kind" : "Function",
    "modules" : [
      "Endpoint Security"
    ],
    "preciseIdentifier" : "c:@F@es_exec_entitlements"
  },
  "title" : "es_exec_entitlements(_:)"
}
-->

# es_exec_entitlements(_:)

```
func es_exec_entitlements(_ exec: UnsafePointer<es_event_exec_t>) -> xpc_object_t?
```

## Parameters

`exec`

The es_event_exec_t being inspected

## Return Value

The XPC dictionary containing all entitlements, or NULL if there are no entitlements.

## Discussion\abstract Get the dictionary of entitlements associated with a message containing an es_event_exec_t
\note The caller is responsible for releasing the returned object.

---

Copyright &copy; 2026 Apple Inc. All rights reserved. | [Terms of Use](https://www.apple.com/legal/internet-services/terms/site.html) | [Privacy Policy](https://www.apple.com/privacy/privacy-policy)