Grant special permissions for an app

Environment

• Knox Service Plugin
• EMMs
• Devices running Android 13 (Knox 3.9) and higher
• Fully managed devices

Overview

Starting with Knox Service Plugin 24.03, you can use the Permissions Controls policy to grant the following special permissions for select apps:

• All file access
• Appear on top
• Change system settings
• Alarm & Reminders
• Notification access
• Usage data access

How to grant special permissions for an app

To apply permission controls for an app:

1. On your EMM console, go to the Knox Service Plugin configuration.

2. Modify the following policies under Device-wide policies:

   Policy	Value
   Enable device policy controls	True
   Application management policies > Enable application management controls	True
   Application management policies > Enable permission controls	True

3. Under Permission Controls, create the following configuration (by default, the first configuration is called Configuration 1):

   Field	Value
   Permission policy	Select your permissions.
   Package or Component name	Add the package or component name of the app. If you’re selecting one or more of All file access, Appear on top, Change system settings, Alarm & Reminders, or Usage data access, you must enter the package name. If you’re selecting All or Notification access, you must enter both the package and component name in the format packageName/componentName. To get the component name of an app, contact the app developer.

4. Save the profile and apply the changes to enrolled devices.