@DTS Engineer Replies to you questions here Yes its triggering the alert when the daemon is communicating to the web server We use low level api for communicating to the server.

@DTS Engineer yes it is a daemon which is started as root by launchd , Also is there a way to set this permission using mdm or programatically ?