CODE_SIGN_ENTITLEMENTS的值指向此配置的正确权限文件。您可以在Xcode中创建尽可能多的配置。默认情况下，Xcode会创建Debug和Release，您可以添加Enterprise并使用构建配置文件，该文件将CODE_SIGN_ENTITLEMENTS指向适用于Enterprise构建的正确权限文件。CODE_SIGN_ENTITLEMENTS设置填充xcconfig文件。
3. 在项目“信息”用户界面中，将生成配置设置为使用相应的XCConfig文件：
4. 您可以通过查看您的生成产品的代码签名权限生成设置来确认。您应该会看到类似于以下内容：
2. 为每个方案/配置指定“APP_GROUP_ID” 
3. 测试一下，为你的应用程序创建一个IPA文件并解压它。
4. 检查.app并右键单击，然后选择“显示包内容”
5. 查找授权文件。（如果找不到授权文件，请查找.xcent文件并将扩展名更改为.entitlements）
6. 验证授权文件中的应用程序组值是否是您在第2步中指定的正确应用程序组ID。Xcode 8似乎存在一个错误，正如这个问题中的评论所指出的那样。
我认为我有一个非常粗糙和危险的，但有效的解决方法。
这个想法是只有一个entitlements文件，Xcode 8看到它并用正确的文件替换正在尝试构建的配置。
这个解决方法有很多步骤，不一定所有步骤都是必要的。如果获得更多信息，我会尝试更新这篇文章。如果你敢于测试这样的东西，请添加评论。
此外，在重新打开Xcode 8之前，旧的配置文件可能需要被删除。
在打开Xcode 8之前删除派生数据也似乎有帮助。
警告！自行承担风险进行测试。这可能会造成不可逆转的损坏
设置这个黑客
脚本模板：
#!/bin/bash
echo
if [ ! -n "$BASH" ] ;then echo Please run this script $0 with bash; exit 1; fi
if [ $# -ne 1 ]; then
echo
echo "ERROR: one of the following expected as parameter: release alpha debug"
echo
exit -2
fi
chosen=$1
echo "You have chosen build configuration $chosen"
echo
echo "This script is a workaround for Xcode 8 bug in handling different build configs and app groups."
echo "(This scenario is most likely not on Apples list of things that developers are expected to do.)"
echo
echo "See comments in this SO answer"
echo "https://dev59.com/pl8e5IYBdhLWcg3wlbPx#25734318"
echo
echo "1) This script must be run with Xcode 8 shut down."
echo "2) All old provisioning profiles will be deteled. Xcode 8 will recreate them with hopefully correct build config."
echo
echo
echo "WARNING: This will delete ALL provisioning profiles for all apps!"
echo "WARNING: This will delete ALL MyProject named DerivedData."
echo
read -n 1 -s -p "Press any key to continue or Ctrl-C to cancel"
echo
# NOTE ABOUT DELETING DERIVED DATA
# Deleting derived data fixes 2 bugs:
# 1) Xcode 8 stubbornly generating some distribution profiles for old entitlements files
# 2) Install from HockeyApp fails due to signing verification error
echo "Deleting derived datas"
rm -vrf /Users/pelam/Library/Developer/Xcode/DerivedData/MyProject-*
echo
echo "Deleting provisioning profiles"
rm -v ~/Library/MobileDevice/Provisioning\ Profiles/*.mobileprovision
echo
echo "Replacing target entitlements files"
echo
cp -v "./MyProjectTarget/MyProjectTarget.$chosen.entitlements" "./MyProjectTarget/MyProjectTarget.entitlements" || exit -1
cp -v "./MyProjectAnotherTarget/MyProjectAnotherTarget.$chosen.entitlements" "./MyProjectAnotherTarget/MyProjectAnotherTarget.entitlements" || exit -1
echo ADD COPY COMMANDS FOR OTHER TARGETS HERE
echo
echo "SUCCESS! Now run Xcode and verify that correct profiles are created."
echo
echo "NOTE:"
echo "Running following command after starting Xcode 8 and waiting a bit can show you what appgroup is selected in each profile."
echo "There should only the one correct app group or the release group. No duplicates in one file or mixed."
echo "If you are not using multiple app groups, you can view the provisioning profile files in text editor to see that they contain correct settings for the configuration you are trying to build"
echo "grep -a appgroup ~/Library/MobileDevice/Provisioning\ Profiles/*.mobileprovision"
echo
echo
CODE_SIGN_ENTITLEMENTS现在可以在Xcode 8.2.1中正常工作。这在8.0版本中肯定不起作用，可能在8.1版本中也是如此（没有检查过），因此可能情况是一些答案/评论中提到的错误现在已经被修复了。 - Nicholas H.