grant/deny app permissions android

expand collapsive

Hey all kinda new here. We’ve got a few devices enrolled in android enterprise. Looking for ways to grant or deny permissions (usage access, draw over apps, notifications, system settings, etc..) for the apps installed in them. Got any ideas?

All Replies

  • Hexnode

    Emma Jones

    Moderator

    @gnishilda  Thank you for reaching out to us!

    On Android 6.0+ devices enrolled in the Android Enterprise program, you can allow or deny the app permissions required by managed Google apps and enterprise apps added through APK files with Hexnode UEM. For instance, to configure permissions for an app from your Hexnode portal:

    1. Go to Policies > Android and select App permissions.
    2. Click on the + Add New App Permission button and Select an app.
    3. A list of App permission appears with 3 options to choose from:
      Default – App will follow the app defaults.
      Allow – Allows a specific feature.
      Deny – Denies a specific feature.
    4. Hit Done.
    5. Go to Policy Targets and associate the policy with the desired targets.

    Hope this solution works for you. Looking forward to hearing from you again.

    Regards
    Emma Jones
    Hexnode UEM 

    • This reply was modified 1 month, 2 weeks ago by  Emma Jones.
    • This reply was modified 1 month, 2 weeks ago by  Emma Jones.
    • This reply was modified 1 month, 2 weeks ago by  Emma Jones.
    • This reply was modified 1 month, 2 weeks ago by  Emma Jones.
    • This reply was modified 1 month, 2 weeks ago by  Emma Jones.
    • This reply was modified 1 month, 2 weeks ago by  Emma Jones.
    • This reply was modified 1 month, 2 weeks ago by  Emma Jones.
    • This reply was modified 1 month, 2 weeks ago by  Emma Jones.
    • This reply was modified 1 month, 2 weeks ago by  Emma Jones.
    • This reply was modified 1 month, 2 weeks ago by  Emma Jones.
    • This reply was modified 1 month, 2 weeks ago by  Emma Jones.
    • This reply was modified 1 month, 2 weeks ago by  Emma Jones.
  • Participant

    Marien

    Participant

    We have similar needs as @gnishilda  but we don’t have our devices enrolled in AE. So ig we can’t do much with your solution. Could you suggest some other way we can have control over app permissions in android? Maybe running some sort of commands or scripts?

  • Hexnode

    Emma Jones

    Moderator

    @marien  To answer your query, you can use Android Debug Bridge (ADB) to run commands that grant permissions for a specified app.

    Firstly, you need to turn on Developer options and enable USB Debugging on your Android device. Next, head to the Android SDK Platform Tools and install ADB on your computer (Mac/Windows). Connect your Android device with a USB to the computer. Now, open Terminal/PowerShell and provide the path to the ADB folder. To verify that the device is connected successfully, execute the command .\adb devices. If the connection is successful, the device will be listed under “List of devices attached”.

    On Android 6.0+ devices, you can use the below commands to grant or revoke any permission declared in the app manifest of the installed application:

    Grant: adb shell pm grant <package> <permission>

    Revoke: adb shell pm revoke <package> <permission>

    Refer permissions on Android to get the complete list of Android permissions. Alternatively, you can run the command adb shell pm list permissions –d –g for the Android permissions list.

    For example, you can provide the below permissions to Microsoft Teams application:

    Geolocation:
    adb shell pm grant com.microsoft.teams android.permission.ACCESS_BACKGROUND_LOCATION

    adb shell pm grant com.microsoft.teams android.permission.ACCESS_COARSE_LOCATION

    adb shell pm grant com.microsoft.teams android.permission.ACCESS_FINE_LOCATION

    Media:
    adb shell pm grant com.microsoft.teams android.permission.WRITE_EXTERNAL_STORAGE

    adb shell pm grant com.microsoft.teams android.permission.READ_EXTERNAL_STORAGE

    adb shell pm grant com.microsoft.teams android.permission.ACCESS_MEDIA_LOCATION

    adb shell pm grant com.microsoft.teams android.permission.MANAGE_MEDIA

    Hope this answer suits your requirements. Should you need any further assistance, please do not hesitate to reach us!

    Cheers!
    Emma Jones
    Hexnode UEM