Hello

You are getting this message because you are trying to sign an app with certain special rights (aka "entitlements") that are defined in its Xcode project, but the provisioning profile you intend to use in order to sign it hasn’t been created to cover these rights.

All the non-standard entitlements that an app uses must also be defined in the provisioning profile used to sign it. Typical "generic" provisioning profiles usually can’t be used to sign such apps. Instead, an explicit app ID with the required "application services" enabled (that’s another name for "entitlements") must be created just for this app on the iOS provisioning portal website, downloaded and installed in the builder’s Keychain, and selected for use for code signing.

Attention: some application services/entitlements require extra data to be passed to the code signer in the form of an XML property list (the builder UI has a button for that). That’s the case for example if that specific entitlement covers a customized list of allowed websites. When it’s the case, the Apple online documentation gives the information about the key/values to use in the XML data. In your case, the com.apple.security.application-groups entitlement indeed *does* require such a list (your Xcode project might already supply it though). See https://developer.apple.com/documentation/bundleresources/entitlements/com_apple_security_application-groups

Do you need more explanations ?

I agree with you that while they make great hardware and fine operating systems, constantly trying to force the developers into using willingly different software, languages and workflow than the common standards is mightily irritating. "Think different" should mean think better, not think the way we want you to think.