How to configure application runtime permissions

This article shows how to configure managed Google Play application runtime permissions and how to push permission rules to managed Android devices.

Runtime permissions cover areas where the app wants data or resources that involve the user's private information, or could potentially affect the user's stored data or the operation of other applications. For example, the ability to read the user's contacts, external storage, or location are runtime permissions. The user has to explicitly grant this permission for the application. However, for managed Google Play applications, administrators can configure and enforce these permissions from the Miradore console.

Requirements

• You must have a Miradore Premium or Premium+ subscription or trial.
• Managed Google Play Enterprise must be configured.
• The device must be running Android 7 or later.
• Managed Google Play applications must be added to Miradore.
• The applications must be approved.

Approve applications

Before you configure runtime permissions for an application, it must be approved.

1. Sign in to managed Google Play store with the account you have used to configure the Managed Google Play Enterprise on your Miradore site.

2. Find and approve the desired application.

Configure runtime permissions

Navigate to Management > Applications and open the application page of the desired work application. Then open the Permissions tab where you can see the permissions required by the application and configure runtime permissions rules.

Possible values are:

• Default
• Granted
• Denied

Configure runtime permissions by simply changing the values in the drop-down menus.

From the device the runtime permissions can be seen from the app settings.

When devices with the work profile enabled connect to the server the permission changes are enforced automatically according to your configurations. You can use the application page's Apply application configuration and policies action to wakeup devices to get the latest changes, or you can do the same using the Sync now action under the dropdown button Actions on the Management > Devices page.

More information

How to configure application settings