Category filter

How to set up permissions and configurations for an app?

With Hexnode UEM, you can configure app configurations and app permissions for your managed applications deployed on your enterprise devices. The app configuration feature for Android allows you to remotely pre-configure the work app settings for different users. The app permission feature will enable you to allow or deny the permissions required by work apps and enterprise apps on a device.

Pre-requisites:

  • The organization and device should be enrolled in Android Enterprise.
  • App permissions and configurations are supported on Enterprise, Ultimate, and Ultra subscription plans.

Setting up app configurations

To set up app configurations,

  1. Go to the Policies tab on your Hexnode portal.
  2. Create a new policy or select an existing policy.
  3. From AndroidApp Management, select App Configurations.
  4. Click on Configure and + Add new configuration button to select a work app and configure it.
  5. (Optional) Use the search bar to search for work apps.
  6. Click on the Select button to choose the app to configure.
  7. The app configuration screen is displayed. Configure it from here and hit Done when you’re done with the configurations.
Notes:

  • Add at least one configuration for an app to show it in the list of configured apps.
  • The App Configurations policy supports the use of the following wildcards:
    • %newline%
    • %username%
    • %email%
    • %phonenumber%
    • %udid%
    • %imei%
    • %deviceid%
    • %serialnumber%
    • %wifimacaddress%
    • %devicename%
    • %model%
    • %osname%
    • %osversion%
    • %iccid%

Different apps have different configurations, so it is not possible to list all of them here. However, we are trying to show you a few examples on how the configurations differ from app to app. We take Chrome Browser as the first example. The available configurations are:

  • Account type for HTTP negotiate authentication
  • Address or URL of proxy server
  • Allow cookies on these sites
  • Allow images on these sites
  • Allow JavaScript on these sites
  • Allow proceeding from the SSL warning page
  • Allow access to a list of URLs
  • Allow session only cookies on these sites
  • Authentication server whitelist
  • Block access to a list of URLs, and so on.

The chrome app on android offers a wide selection of app configurations

While Gmail shows varying configurations. Listing out some of them below.

  • Default email signature
  • Default sync window
  • Device identifier
  • Email address
  • Hostname or host

Setting up app permissions

Set up what a specific app can do or have access to, even before they are installed on the device. The permissions may include location, network access, and camera, but are not limited to these three. App permissions differ between apps, but there might be common permissions for more than one app.

To set up permissions for an app,

  1. From your Hexnode portal, go to Policies.
  2. Create a new policy or select an existing policy.
  3. Select App Permissions from AndroidApp Management.
  4. Click on the + Add New App Permission button to select a work app and configure permissions.
  5. (Optional) Use the search bar to search for work apps.
  6. Click on the Select button to the right of an app.
  7. The app permission screen is displayed. Most of the restrictions contain three options to choose from – Default, Allow and Deny, which help you decide whether the app should follow the app defaults, or allow or deny a specific feature.
  8. Hit Done when you’re done with setting up permissions for an app.

Here are some of the restrictions for Dropbox.

  • View network connections
  • View Wi-Fi connections
  • Take pictures and videos
  • Find accounts on the device
  • Full network access
  • Add or remove accounts
  • Run at startup
  • Prevent device from sleeping
Notes:


The App Permissions policy allows you to configure only the runtime permissions for apps, some of which are listed below.

  1. android.permission.ACCEPT_HANDOVER
  2. android.permission.ACCESS_BACKGROUND_LOCATION
  3. android.permission.ACCESS_COARSE_LOCATION
  4. android.permission.ACCESS_FINE_LOCATION
  5. android.permission.ACCESS_MEDIA_LOCATION
  6. android.permission.ACTIVITY_RECOGNITION
  7. com.android.voicemail.permission.ADD_VOICEMAIL
  8. android.permission.ANSWER_PHONE_CALLS
  9. android.permission.BODY_SENSORS
  10. android.permission.CALL_PHONE
  11. android.permission.CAMERA
  12. android.permission.GET_ACCOUNTS
  13. android.permission.PROCESS_OUTGOING_CALLS
  14. android.permission.READ_CALENDAR
  15. android.permission.READ_CALL_LOG
  16. android.permission.READ_CONTACTS
  17. android.permission.READ_EXTERNAL_STORAGE
  18. android.permission.READ_PHONE_NUMBERS
  19. android.permission.READ_PHONE_STATE
  20. android.permission.READ_SMS
  21. android.permission.RECEIVE_MMS
  22. android.permission.RECEIVE_SMS
  23. android.permission.RECEIVE_WAP_PUSH
  24. android.permission.RECORD_AUDIO
  25. android.permission.SEND_SMS
  26. android.permission.USE_SIP
  27. android.permission.WRITE_CALENDAR
  28. android.permission.WRITE_CALL_LOG
  29. android.permission.WRITE_CONTACTS
  30. android.permission.WRITE_EXTERNAL_STORAGE

For Android 12+ devices, there are two additional runtime permissions for Bluetooth that the policy can access:

  1. android.permission.BLUETOOTH
  2. android.permission.BLUETOOTH_ADMIN

However, the set of runtime permissions that can be configured via the policy will ultimately depend on the application.

Associating Hexnode policy with devices

If you haven’t saved the policy yet, you can

  1. Go to the Policy Targets tab within the policy.
  2. Click on + Add Devices.
  3. Search and select the devices to which the policy needs to be associated with and click on OK.
    You can also associate policies to Device Groups, Users, User Groups or Domains from the left pane underneath the Policy Targets tab.
  4. Save the policy to associate the policy to the device.

If you have saved the policy,

  1. From your Policies tab, check the policy.
  2. Select Associate Targets from Manage.
  3. Select the devices and click on Associate to get the policy associated with these devices.
  • Managing 'Android Enterprise' Devices