Application Permissions (Android)
The Application Permissions job empowers IT admins to remotely enable Runtime permissions and Special App Access for third-party apps on enrolled devices. This feature grants administrators fine-grained control over app permissions, enhancing security and data privacy. By managing permissions centrally, administrators can ensure that apps function as intended while safeguarding sensitive information on the devices. This streamlines the process of managing app permissions and provides a more secure and efficient device management experience.
This feature is supported on Platform Signed Devices, Device Owner Enrolled devices, Samsung Knox devices running with Android OS 12, and Zebra OEM enabled devices running with SureMDM Agent version >= 27.44.04.
To create an Application Permission job and deploy it to the enrolled device(s) or group(s) remotely, follow these steps:
1. On the SureMDM console, navigate to Jobs > New Job > Android > Application Permission.
2. Enter a Job Name and click Add.
3. On the Add App prompt, enable the required permissions for the third-party apps and click Save.
| Settings | Description |
|---|---|
| Application Name | Choose an app from the list Or Click Add New App to add a new app with the following details, and click Ok. Application Name Package Name Note: Manually added apps will have the option to Edit and Delete the apps. |
| Runtime Permissions | Allow or deny the required runtime permissions for the selected app from the following: Storage Calendar Call Logs Camera Contacts Location Microphone Telephone SMS Physical Activity Body Sensors |
| Special App Access | Allow or deny the required special access for the selected app from the following: Battery Optimization Battery Statistics Device Administrator Display Over Other Apps Do Not Disturb Modify System Settings Notification Access Note: The device must run Android 8.0 and below for this feature to work. Picture-In-Picture Unrestricted Data Usage Access Remove app permissions if the app isn't used |
| App Restrictions | The App Restrictions section allows administrators to configure managed app settings for selected applications. App Restrictions, enable IT admins to remotely specify settings for apps, with configurable options varying by application. This section applies only to apps that support managed configurations. |
The newly created job will be listed in the Jobs List section.
4. Go back to the Home tab and select Android device(s) or group(s).
5. Click Apply to launch the Apply Job/Profile To Device prompt.
6. In the Apply Job/Profile To Device prompt, select the Job and click Apply.