# Policy Database Constants Use these constants to set rights and rules in the policy database. ## Discussion Use these constants when creating or modifying a rule in the policy database using the [`AuthorizationRightSet(_:_:_:_:_:_:)`](/documentation/Security/AuthorizationRightSet(_:_:_:_:_:_:)) function. ## Topics ### Constants [`var kAuthorizationRightRule: String`](/documentation/Security/kAuthorizationRightRule) Indicates a rule delegation key. [`var kAuthorizationRuleIsAdmin: String`](/documentation/Security/kAuthorizationRuleIsAdmin) Indicates a delegate rule definition constant specifying that the user must be an administrator. [`var kAuthorizationRuleAuthenticateAsAdmin: String`](/documentation/Security/kAuthorizationRuleAuthenticateAsAdmin) Indicates a delegate rule definition constant specifying that the user must authenticate as an administrator. [`var kAuthorizationRuleAuthenticateAsSessionUser: String`](/documentation/Security/kAuthorizationRuleAuthenticateAsSessionUser) Indicates a delegate rule definition constant specifying that the user must authenticate as the session owner (logged-in user). [`var kAuthorizationRuleClassAllow: String`](/documentation/Security/kAuthorizationRuleClassAllow) Indicates a delegate rule definition constant that always allows the specified right. [`var kAuthorizationRuleClassDeny: String`](/documentation/Security/kAuthorizationRuleClassDeny) Indicates a delegate rule definition constant that always denies the specified right. [`var kAuthorizationComment: String`](/documentation/Security/kAuthorizationComment) Indicates comments for a rule. --- Copyright © 2026 Apple Inc. All rights reserved. | [Terms of Use](https://www.apple.com/legal/internet-services/terms/site.html) | [Privacy Policy](https://www.apple.com/privacy/privacy-policy)