[Emma Hexnode 21 June 2022 Emma Moderator]

@gnishilda  Thank you for reaching out to us!

On Android 6.0+ devices enrolled in the Android Enterprise program, you can allow or deny the app permissions required by managed Google apps and enterprise apps added through APK files with Hexnode UEM. For instance, to configure permissions for an app from your Hexnode portal:

1. Go to Policies > Android and select App permissions.
2. Click on the + Add New App Permission button and Select an app.
3. A list of App permission appears with 3 options to choose from:
   Default – App will follow the app defaults.
   Allow – Allows a specific feature.
   Deny – Denies a specific feature.
4. Hit Done.
5. Go to Policy Targets and associate the policy with the desired targets.

Hope this solution works for you. Looking forward to hearing from you again.

Regards
Emma Jones
Hexnode UEM 

• This reply was modified 9 months ago by  Emma Jones.
• This reply was modified 9 months ago by  Emma Jones.
• This reply was modified 9 months ago by  Emma Jones.
• This reply was modified 9 months ago by  Emma Jones.
• This reply was modified 9 months ago by  Emma Jones.
• This reply was modified 9 months ago by  Emma Jones.
• This reply was modified 9 months ago by  Emma Jones.
• This reply was modified 9 months ago by  Emma Jones.
• This reply was modified 9 months ago by  Emma Jones.
• This reply was modified 9 months ago by  Emma Jones.
• This reply was modified 9 months ago by  Emma Jones.
• This reply was modified 9 months ago by  Emma Jones.

[Marien Participant 21 June 2022 Marien Participant]

We have similar needs as @gnishilda  but we don’t have our devices enrolled in AE. So ig we can’t do much with your solution. Could you suggest some other way we can have control over app permissions in android? Maybe running some sort of commands or scripts?

[Emma Hexnode 21 June 2022 Emma Moderator]

@marien  To answer your query, you can use Android Debug Bridge (ADB) to run commands that grant permissions for a specified app.

Firstly, you need to turn on Developer options and enable USB Debugging on your Android device. Next, head to the Android SDK Platform Tools and install ADB on your computer (Mac/Windows). Connect your Android device with a USB to the computer. Now, open Terminal/PowerShell and provide the path to the ADB folder. To verify that the device is connected successfully, execute the command .\adb devices. If the connection is successful, the device will be listed under “List of devices attached”.

On Android 6.0+ devices, you can use the below commands to grant or revoke any permission declared in the app manifest of the installed application:

Grant: adb shell pm grant <package> <permission>

Revoke: adb shell pm revoke <package> <permission>

Refer permissions on Android to get the complete list of Android permissions. Alternatively, you can run the command adb shell pm list permissions –d –g for the Android permissions list.

For example, you can provide the below permissions to Microsoft Teams application:

Geolocation:
adb shell pm grant com.microsoft.teams android.permission.ACCESS_BACKGROUND_LOCATION

adb shell pm grant com.microsoft.teams android.permission.ACCESS_COARSE_LOCATION

adb shell pm grant com.microsoft.teams android.permission.ACCESS_FINE_LOCATION

Media:
adb shell pm grant com.microsoft.teams android.permission.WRITE_EXTERNAL_STORAGE

adb shell pm grant com.microsoft.teams android.permission.READ_EXTERNAL_STORAGE

adb shell pm grant com.microsoft.teams android.permission.ACCESS_MEDIA_LOCATION

adb shell pm grant com.microsoft.teams android.permission.MANAGE_MEDIA

Hope this answer suits your requirements. Should you need any further assistance, please do not hesitate to reach us!

Cheers!
Emma Jones
Hexnode UEM