The App permission management section lets you configure rules for granting runtime permissions to apps installed on devices managed via the Kaspersky Endpoint Security for Android app in device owner mode or to apps installed in an Android work profile.
You can configure rules for granting runtime permissions by creating or editing configuration files for specific apps.
Permission granting rules configured for specific apps have precedence over the general policy for granting permissions to apps installed on devices or in the Android work profile. For example, if you first select the Deny permissions automatically option in an Android work profile section, and then select the Grant permissions automatically option for a specific app in the App permission management section, the permission for this app will be granted automatically.
To add app permissions:
In the console tree, in the Managed devices folder, select the administration group to which the Android devices belong.
In the workspace of the group, select the Policies tab.
Open the policy properties window by double-clicking any column.
Complete the following steps within 15 minutes. Otherwise, you may face an error when saving changes to the policy.
In the policy Properties window, select the App permission management section.
Click the Add button.
The Add permission granting rules window opens.
Select how to add a configuration with permission granting rules:
When adding a configuration manually, you need to click the Add permission button to select a permission and an action to be performed for it from the drop-down lists.
When adding a configuration using an installation package added to Kaspersky Security Center, you need to select the app from the list of mobile app packages.
After that, you can view a list of runtime permissions and select the action to be performed for each permission.
To get the package name of an app that has been added to Kaspersky Security Center:
In the console tree of Kaspersky Security Center go to Advanced > Remote installation > Installation packages.
Click the Additional actions button and select Manage mobile apps packages in the drop-down list.
In the Mobile apps package management window that opens, identifiers of managed apps are displayed in the Application name column.
If you have an app package as an .apk or .ipa file and want to know the app identifier, you can add the app package to the Mobile apps package management window by clicking the New button and following the on-screen instructions.
When importing a configuration from an APK file or an installation package, the value is inserted automatically.
An app is denied a permission without user interaction.
You can save only one granting rule for each app permission.
Click OK to apply the configuration.
The configuration appears in the List of app permissions.
Click the Apply button to save your changes.
The configuration with permission granting rules is applied. Mobile device settings are changed after the next device synchronization with Kaspersky Security Center.
To edit app permissions:
In the console tree, in the Managed devices folder, select the administration group to which the Android devices belong.
In the workspace of the group, select the Policies tab.
Open the policy properties window by double-clicking any column.
Complete the following steps within 15 minutes. Otherwise, you may face an error when saving changes to the policy.
In the policy Properties window, select the App permission management section.
Select the app in the List of app permissions block, and then click the Edit button.
The Edit permission granting rules window opens.
Edit the selected permission granting rule as follows:
To add a new permission to the configuration, click the Add permission button below all the settings, and then select a permission and an action to be performed for this permission.
You can add several permissions.
To edit an action for an existing permission, select another action in the list.
To delete a permission that was added manually, click the X button in the upper right corner of the permission's field.
Click OK to close the Edit permission granting rules window.
Click the Apply button to save your changes.
The edited configuration with permission granting rules is applied. Mobile device settings are changed after the next device synchronization with Kaspersky Security Center.
To delete app permissions:
In the console tree, in the Managed devices folder, select the administration group to which the Android devices belong.
In the workspace of the group, select the Policies tab.
Open the policy properties window by double-clicking any column.
Complete the following steps within 15 minutes. Otherwise, you may face an error when saving changes to the policy.
In the policy Properties window, select the App permission management section.
Select the app from the List of app permissions block, and then click the Delete button.
Click the Apply button to save your changes.
The configured permissions for the selected app are deleted. Mobile device settings are changed after the next device synchronization with Kaspersky Security Center.