- read/write to resources owned by diag
- Allows the app to read and write to any resource owned by the diag group; for example, files in /dev. This could potentially affect system stability and security. This should be ONLY be used for hardware-specific diagnostics by the manufacturer or operator.
- System tools
- Lower-level access and control of the system.