Permissions for Enterprise Applications

The following permissions are available to system applications and enterprise applications. Enterprise applications include normal enterprise apps and Mobile Device Management (MDM) applications.

The distribution type of enterprise applications can be enterprise_normal (normal enterprise application) or enterprise_mdm (MDM application). You can obtain the distribution type from the app-distribution-type field in the HarmonyAppProvision configuration file.

For details about how to request the permissions for enterprise applications, see declaring permissions.

ohos.permission.SET_FILE_GUARD_POLICY

Allows an application to update the file guard policy.

Permission level: system_basic

Authorization mode: system_grant

Enable via ACL: true

Valid since: 10

Changelog: For API versions 10 to 14, this permission is of the system_core level and available only to MDM applications. Starting from API version 14, the permission level is changed to system_basic and this permission is accessible to normal enterprise applications.

ohos.permission.FILE_GUARD_MANAGER

Allows an application to scan media and sandbox and set file extended properties.

Permission level: system_basic

Authorization mode: system_grant

Enable via ACL: true

Valid since: 10

Changelog: For API versions 10 to 14, this permission is of the system_core level and available only to MDM applications. Starting from API version 14, the permission level is changed to system_basic and this permission is accessible to normal enterprise applications.

ohos.permission.INTERACT_ACROSS_LOCAL_ACCOUNTS

Allows an application to interact across local accounts.

Permission level: system_basic

Authorization mode: system_grant

Enable via ACL: true

Valid since: 7

Changelog: This permission is available only to system applications in API versions 7 to 13. From API version 14, it is available to normal enterprise applications.

ohos.permission.GET_RUNNING_INFO

Allows an application to obtain running status information of another application.

Permission level: system_basic

Authorization mode: system_grant

Enable via ACL: true

Valid since: 7

Changelog: This permission is available only to system applications in API versions 7 to 13. From API version 14, it is available to normal enterprise applications.

ohos.permission.RUNNING_STATE_OBSERVER

Allows an application to listen for the state of another application.

Permission level: system_basic

Authorization mode: system_grant

Enable via ACL: true

Valid since: 7

Changelog: This permission is available only to system applications in API versions 7 to 13. From API version 14, it is available to normal enterprise applications.

ohos.permission.GET_BUNDLE_INFO_PRIVILEGED

Allows an application to obtain basic information and sensitive information about another application.

Permission level: system_basic

Authorization mode: system_grant

Enable via ACL: true

Valid since: 7

Changelog: This permission is available only to system applications in API versions 7 to 13. From API version 14, it is available to normal enterprise applications.

ohos.permission.GET_DOMAIN_ACCOUNTS

Allows an application to obtain domain account information.

Permission level: system_basic

Authorization mode: system_grant

Enable via ACL: true

Valid since: 10

Changelog: This permission is available only to system applications in API versions 10 to 13. From API version 14, it is available to normal enterprise applications.

ohos.permission.QUERY_AUDIT_EVENT

Allows an application to query security audit events.

Permission level: system_basic

Authorization mode: system_grant

Enable via ACL: true

Valid since: 12

Changelog: This permission is available only to MDM applications in API versions 12 to 13. From API version 14, it is available to normal enterprise applications.

ohos.permission.KILL_APP_PROCESSES

Allows a system application to kill other applications.

Permission level: system_basic

Authorization mode: system_grant

Enable via ACL: true

Valid since: 12

Changelog: This permission is available only to system applications in API versions 7 to 13. From API version 14, it is available to normal enterprise applications.

ohos.permission.SET_TELEPHONY_ESIM_STATE_OPEN

Allows a system application or carrier application to set the eSIM nickname and activate the eSIM.

Permission level: system_basic

Authorization mode: system_grant

Enable via ACL: true

Valid since: 14

Changelog: Since API 14, the permission level is changed to system_basic, and this permission is available only to normal enterprise applications instead of all applications.