Skip to content

App permissions configuration (Android Enterprise work profile policy)

The App permissions configuration lets you set the response for permission requests from work apps.


You can only configure runtime permissions, which are a subset of permissions an app can ask for. Users still get requests for app features such as battery optimization or accessibility capabilities. This is an Android limitation.


In Android 12 and later, you can’t grant the following permissions on behalf of your users, but you can deny them:

  • Location
  • Camera
  • Microphone
  • Body sensors
  • Physical activity
Setting Description
Default response for runtime permission requests

The default response for runtime permission requests:

  • Prompt: Users are prompted to grant a permission.
  • Auto-accept: All runtime permission requests are automatically granted.
  • Auto-deny: All runtime permission requests are automatically denied.

Users can’t edit permissions later if you select Auto-accept or Auto-deny.

App-specific runtime permissions

Grant or deny runtime permissions for specific apps.

Click Add to select an app and then select one of the following for each permission:

  • Selectable: Users can edit the permission.
  • Granted: The permission is granted.
  • Denied: The permission is denied.