Apple does not allow MDM solutions to fully enforce GPS/location access remotely for an app in the same way some other settings can be managed. The user may need to open the Hexnode app once and grant the required location permission when prompted.
The recommended immediate step is to ask users to launch the Hexnode app once and set location access to Always when prompted. After that, location updates should start reporting, provided Location Services is enabled, the device has internet access, and the movement threshold is met.
As a preventive workaround, you can use Screen Time restrictions on the device to reduce the chance of users changing location settings later:
1. Open Settings > Screen Time.
2. Turn on Screen Time.
3. Go to Content & Privacy Restrictions and enable it.
4. Open Location Services.
5. Confirm Location Services is enabled and the Hexnode app is set to Always.
6. Select Don’t Allow Changes to prevent users from modifying Location Services.
7. Set a Screen Time passcode so the restriction cannot be changed without the passcode.
This does not remove the need to initialize the app once, but it can help keep location settings from being changed afterward.
Regards,
Mary Romero