Elevating Charles Proxy

Authorizationdb Right: com.apple.ServiceManagement.blesshelper

This action deals with applications that use SMJobBless to install privileged helpers. This action can be used to elevate the installation of a privileged helper while an application is running. The right will be elevated for the duration of the targeted application. Once the application is quit, the right will be restored to its default.

Advanced message actions such as Approval, Deny, Justification, or Warning should not be used in conjunction with this action.

Example Application: Charles Proxy

Using the Policy Wizard, create a controlling policy, click Next Step.
Select Elevate, click Next Step.
Select Run Silently, click Next Step.
Select Executables, click Next Step.
Select Modify Authorization Database, click Next Step.
Select Existing Filter, search for select the App Bundle filter for Charles Proxy. If it doesn't exist, create it.
Click Update.
Click Next Step.
Name your policy, add a description.
From the Right Name drop-down, select Bless Helper Authorization Right (com.apple.ServiceManagement.blesshelper).
Click Create Policy.
Set the Inactive switch to Active.
Next to Deployment click the i icon and run the Resource and Collection Targeting Update task.

What to Expect on the Endpoint

With a policy in place, when Charles Proxy is started and the policy is effective and its helper isn't installed, it will present this dialog:

Clicking Grant Privileges will approve the installation of the helper without prompting for administrator credentials.
Without a policy in place, when Charles Proxy is started and its helper isn't installed, it will present an authorization required dialog:

Privileges to the Helper, if not already installed, need to be granted no matter if a policy is in place or not. Granting those privileges, however won't require an authorization when a policy with Bless Helper Authorization Right action is in place and active.