Permissions for System Applications
Before requesting permissions for your application, read and understand the Workflow for Requesting Permissions and this topic to determine the permissions required.
NOTE
- The permissions listed in this topic are available to system_basic or system_core applications, but not to normal applications.
- However, some of the permissions can be granted to an application of the normal APL via the Access Control List (ACL).
system_grant Permissions (Requestable via ACL)
The following lists the system_grant permissions that can be requested via the ACL.
For details about the process for requesting permissions, see Workflow for Requesting Permissions.
ohos.permission.PRE_START_ATOMIC_SERVICE
Allows a window to be displayed with animation for an atomic service without the loading dialog box.
Permission level: system_core
Authorization mode: system_grant
Enable via ACL: true
Valid since: 12
ohos.permission.MANAGE_APP_KEEP_ALIVE
Allows a system service to set the keep-alive flag for other applications.
Permission level: system_core
Authorization mode: system_grant
Enable via ACL: true
Valid since: 14
ohos.permission.ACCESS_BBOX_DIR
Allows a system application to access the bbox directory.
Permission level: system_basic
Authorization mode: system_grant
Enable via ACL: true
Valid since: 12
ohos.permission.CONTROL_LOCATION_SWITCH
Allows an application to turn on and off the location service.
Permission level: system_core
Authorization mode: system_grant
Enable via ACL: true
Valid since: 12
ohos.permission.SUBSCRIBE_SWING_ABILITY
Allows an application to use the subscription capability powered by smart sensing.
Permission level: system_basic
Authorization mode: system_grant
Enable via ACL: true
Valid since: 12
ohos.permission.MANAGER_SWING_MOTION
Allows an application to use the air gesture adaptation capability.
Permission level: system_basic
Authorization mode: system_grant
Enable via ACL: true
Valid since: 12
ohos.permission.MOCK_LOCATION
Allows an application to use the mock location function.
Permission level: system_basic
Authorization mode: system_grant
Enable via ACL: true
Valid since: 12
ohos.permission.ACCESS_LEARN_MORE_DIALOG
Allows a system application to display the Learn more dialog for detailed information.
Permission level: system_basic
Authorization mode: system_grant
Enable via ACL: true
Valid since: 13
ohos.permission.MANAGE_SETTINGS
Allows an application to set the device-level configuration table and user-level configuration table in SettingsData.
Permission level: system_basic
Authorization mode: system_grant
Enable via ACL: true
Valid since: 12
ohos.permission.ACCESS_SCREEN_LOCK
Allow an application to access screen lock and unlock information.
Permission level: system_basic
Authorization mode: system_grant
Enable via ACL: true
Valid since: 12
ohos.permission.SYSTEM_FLOAT_WINDOW
Allows an application to be displayed in a floating window on top of other applications.
Permission level: system_basic
Authorization mode: system_grant
Enable via ACL: true
Valid since: 7
ohos.permission.ALLOW_UPGRADE_GUIDE_ACCESS
Allows a system application to obtain the application upgrade guide or start the application upgrade component.
Permission level: system_basic
Authorization mode: system_grant
Enable via ACL: true
Valid since: 12
ohos.permission.ACCESS_MEDIALIB_THUMB_DB
Allows a system application to access and modify the media library database.
Permission level: system_core
Authorization mode: system_grant
Enable via ACL: true
Valid since: 12
ohos.permission.AGENT_REQUIRE_FORM
Allows the application agent to request widgets.
Permission level: system_basic
Authorization mode: system_grant
Enable via ACL: true
Valid since: 11
ohos.permission.MANAGE_VPN
Allows a system application to enable or disable the VPN function.
Permission level: system_basic
Authorization mode: system_grant
Enable via ACL: false in API versions 10 to 11; true in API version 12 and later
Valid since: 10
ohos.permission.WAKEUP_VISION
Allows an application to access the AI Voice vision component.
Permission level: system_basic
Authorization mode: system_grant
Enable via ACL: true
Valid since: 11
ohos.permission.WAKEUP_VOICE
Allows an application to access the AI Voice wakeup component.
Permission level: system_basic
Authorization mode: system_grant
Enable via ACL: true
Valid since: 11
ohos.permission.ATTEST_KEY
Allows an application to obtain the certificate chain that attests the key validity.
Permission level: system_basic
Authorization mode: system_grant
Enable via ACL: true
Valid since: 11
ohos.permission.GET_PHONE_NUMBERS
Allows an application to obtain the phone numbers of the device.
Permission level: system_basic
Authorization mode: system_grant
Enable via ACL: true
Valid since: 10
ohos.permission.ACTIVATE_THEME_PACKAGE
Allows a system application to set themes, including wallpapers, icons, skins, Always On Display (AOD), and fonts.
Permission level: system_basic
Authorization mode: system_grant
Enable via ACL: true
Valid since: 11
ohos.permission.SET_UNREMOVABLE_NOTIFICATION
Allows an application to publish unremovable notifications.
Permission level: system_basic
Authorization mode: system_grant
Enable via ACL: true
Valid since: 11
ohos.permission.UNINSTALL_BUNDLE
Allows an application to uninstall applications.
Permission level: system_core
Authorization mode: system_grant
Enable via ACL: true
Valid since: 10
ohos.permission.RECOVER_BUNDLE
Allows pre-installed applications to be recovered.
Permission level: system_core
Authorization mode: system_grant
Enable via ACL: true
Valid since: 10
ohos.permission.UPDATE_SYSTEM
Allows an application to call the update APIs.
Permission level: system_basic
Authorization mode: system_grant
Enable via ACL: true
Valid since: 8
ohos.permission.FACTORY_RESET
Allows an application to call the API for restoring factory settings.
Permission level: system_basic
Authorization mode: system_grant
Enable via ACL: true
Valid since: 8
ohos.permission.ASSIST_DEVICE_UPDATE
Allows an application to start the upgrade service to perform assisted or collaborative update for other devices.
Permission level: system_basic
Authorization mode: system_grant
Enable via ACL: true
Valid since: 12
ohos.permission.RECEIVE_UPDATE_MESSAGE
Allows a system application or system ability to listen for the key events occurred in the system update process.
Permission level: system_basic
Authorization mode: system_grant
Enable via ACL: true
Valid since: 12
ohos.permission.GET_ALL_PROCESSES
Allows a system application or system ability to read files in /proc.
Permission level: system_core
Authorization mode: system_grant
Enable via ACL: true
Valid since: 12
ohos.permission.MANAGE_LOCAL_ACCOUNTS
Allows an application to manage local accounts.
Permission level: system_basic
Authorization mode: system_grant
Enable via ACL: true
Valid since: 7
ohos.permission.ACCESS_SYSTEM_SETTINGS
Allows an application to access or start Settings.
Permission level: system_basic
Authorization mode: system_grant
Enable via ACL: true
Valid since: 9
ohos.permission.SET_ABILITY_CONTROLLER
Allows an application to intercept the startup of the Ability component. This permission is used for testing, such as the stability test.
Permission level: system_basic
Authorization mode: system_grant
Enable via ACL: true
Valid since: 9
ohos.permission.INTERACT_ACROSS_LOCAL_ACCOUNTS_EXTENSION
Allows an application to interact across local accounts.
Permission level: system_core
Authorization mode: system_grant
Enable via ACL: true
Valid since: 7
ohos.permission.CLEAN_APPLICATION_DATA
Allows an application to clear application data.
Permission level: system_basic
Authorization mode: system_grant
Enable via ACL: true
Valid since: 7
ohos.permission.START_ABILITIES_FROM_BACKGROUND
Allows an application to start or access other components from the background.
Permission level: system_basic
Authorization mode: system_grant
Enable via ACL: true
Valid since: 9
ohos.permission.MANAGE_MISSIONS
Allows an application to manage missions in the system.
Permission level: system_core
Authorization mode: system_grant
Enable via ACL: true
Valid since: 9
ohos.permission.MANAGE_ENTERPRISE_DEVICE_ADMIN
Allows an application to activate a device administrator application.
Permission level: system_core
Authorization mode: system_grant
Enable via ACL: true
Valid since: 9
ohos.permission.ENTERPRISE_CONFIG
Allows an application to activate enterprise devices.
Permission level: system_basic
Authorization mode: system_grant
Enable via ACL: true
Valid since: 12
ohos.permission.RECEIVE_ENTERPRISE_POLICY_EVENT
Allows a system application to subscribe to the policy events published by the Enterprise Device Management service.
Permission level: system_basic
Authorization mode: system_grant
Enable via ACL: true
Valid since: 14
ohos.permission.PUBLISH_SYSTEM_COMMON_EVENT
Allows an application to publish system common events.
Permission level: system_basic
Authorization mode: system_grant
Enable via ACL: true
Valid since: 10
ohos.permission.NOTIFICATION_CONTROLLER
Allows an application to manage and subscribe to notifications.
Permission level: system_core
Authorization mode: system_grant
Enable via ACL: true
Valid since: 8
ohos.permission.CLOUDDATA_CONFIG
Allows an application to obtain the device-cloud information of the configuration database.
Permission level: system_basic
Authorization mode: system_grant
Enable via ACL: true
Valid since: 10
ohos.permission.GET_DEFAULT_APPLICATION
Allows an application to query default applications.
Permission level: system_core
Authorization mode: system_grant
Enable via ACL: true
Valid since: 9
ohos.permission.MANAGE_INTELLIGENT_VOICE
Allows an application to access the intelligent voice service interfaces.
Permission level: system_basic
Authorization mode: system_grant
Enable via ACL: true
Valid since: 10
ohos.permission.POWER_MANAGER
Allows an application to hibernate or wake up the device by calling an API.
Permission level: system_core
Authorization mode: system_grant
Enable via ACL: true
Valid since: 7
ohos.permission.GET_SCENE_CODE
Allows an application to obtain the scene code of the specified application.
Permission level: system_basic
Authorization mode: system_grant
Enable via ACL: true
Valid since: 10
ohos.permission.MANAGE_ECOLOGICAL_RULE
Allows the rules for generating the scene code and the matching experience to be set for the manager service.
Permission level: system_basic
Authorization mode: system_grant
Enable via ACL: true
Valid since: 10
ohos.permission.INSTALL_ENTERPRISE_BUNDLE
Allows an application to install enterprise InHouse applications.
Permission level: system_core
Authorization mode: system_grant
Enable via ACL: true
Valid since: 10
ohos.permission.INSTALL_BUNDLE
Allows an application to install and uninstall other applications except enterprise applications, including enterprise InHouse, mobile device management (MDM), and Normal applications.
Permission level: system_core
Authorization mode: system_grant
Enable via ACL: true
Valid since: 7
ohos.permission.MANAGE_SHORTCUTS
Allows an application to query and start shortcuts of other applications.
Permission level: system_core
Authorization mode: system_grant
Enable via ACL: true
Valid since: 7
ohos.permission.OBSERVE_FORM_RUNNING
Allows an application to listen for the card running status.
Permission level: system_basic
Authorization mode: system_grant
Enable via ACL: true
Valid since: 10
ohos.permission.WRITE_HIVIEW_SYSTEM
Allows an application to modify HiView data.
Permission level: system_basic
Authorization mode: system_grant
Enable via ACL: true
Valid since: 10
ohos.permission.READ_HIVIEW_SYSTEM
Allows an application to access HiView data.
Permission level: system_basic
Authorization mode: system_grant
Enable via ACL: true
Valid since: 10
ohos.permission.READ_DFX_SYSEVENT
Allows an application to access system event logging data.
Permission level: system_basic
Authorization mode: system_grant
Enable via ACL: true
Valid since: 8
ohos.permission.READ_DFX_XPOWER
Allows an application to read XPower data.
Permission level: system_basic
Authorization mode: system_grant
Enable via ACL: true
Valid since: 12
ohos.permission.PERMISSION_USED_STATS
Allows a system application to access the permission usage records.
Permission level: system_basic
Authorization mode: system_grant
Enable via ACL: true
Valid since: 9
ohos.permission.CAPTURE_SCREEN
Allows an application to take screenshots.
Permission level: system_core
Authorization mode: system_grant
Enable via ACL: true
Valid since: 7
ohos.permission.ACCESS_CERT_MANAGER_INTERNAL
Allows an application to install, uninstall, and authorize users' public certificate credentials.
Permission level: system_basic in API versions 9 to 11 and system_core since API versions 12.
Authorization mode: system_grant
Enable via ACL: true
Valid since: 9
ohos.permission.CLOUDFILE_SYNC
Allows an application to perform device-cloud synchronization.
Permission level: system_basic
Authorization mode: system_grant
Enable via ACL: true
Valid since: 10
ohos.permission.CHANGE_OVERLAY_ENABLED_STATE
Allows a system application to disable the application with the overlay feature enabled.
Permission level: system_basic
Authorization mode: system_grant
Enable via ACL: true
Valid since: 10
ohos.permission.ACCESS_SCREEN_LOCK_INNER
Allows an application to use the lock screen service to lock the screen, send a screen lock event, and invoke the system event callback.
Permission level: system_core
Authorization mode: system_grant
Enable via ACL: true
Valid since: 10
ohos.permission.BACKUP
Allows an application to use the backup and restore capability.
Permission level: system_basic
Authorization mode: system_grant
Enable via ACL: true
Valid since: 9
ohos.permission.MOUNT_FORMAT_MANAGER
Allows an application to format external cards.
Permission level: system_basic
Authorization mode: system_grant
Enable via ACL: true
Valid since: 9
ohos.permission.MOUNT_UNMOUNT_MANAGER
Allows an application to mount and unmount external cards.
Permission level: system_basic
Authorization mode: system_grant
Enable via ACL: true
Valid since: 9
ohos.permission.PROXY_AUTHORIZATION_URI
Allows the application proxy to authorize the URI.
Permission level: system_basic
Authorization mode: system_grant
Enable via ACL: true
Valid since: 10
ohos.permission.ACCESS_CAST_ENGINE_MIRROR
Allows an application to use the mirror projection capability.
Permission level: system_basic
Authorization mode: system_grant
Enable via ACL: true
Valid since: 10
ohos.permission.ACCESS_CAST_ENGINE_STREAM
Allows an application to invoke the system resource projection capability.
Permission level: system_basic
Authorization mode: system_grant
Enable via ACL: true
Valid since: 10
ohos.permission.INSTALL_ENTERPRISE_NORMAL_BUNDLE
Allows an enterprise normal bundle to be installed on enterprise devices.
Permission level: system_core
Authorization mode: system_grant
Enable via ACL: true
Valid since: 10
ohos.permission.UPDATE_MIGRATE
Allows data migration during the update process.
Permission level: system_basic
Authorization mode: system_grant
Enable via ACL: true
Valid since: 10
ohos.permission.MANAGE_SENSOR
Allows an application that cannot directly use the sensor to turn on and off the sensor.
Permission level: system_basic
Authorization mode: system_grant
Enable via ACL: true
Valid since: 10
ohos.permission.MANAGE_PRINT_JOB
Allows an application to obtain the capability of managing print tasks.
Permission level: system_basic
Authorization mode: system_grant
Enable via ACL: true
Valid since: 10
ohos.permission.securityguard.SET_MODEL_STATE
Allows an application to control the SecurityGuard model switch.
Permission level: system_core
Authorization mode: system_grant
Enable via ACL: true
Valid since: 10
ohos.permission.CAPTURE_VOICE_DOWNLINK_AUDIO
Allows an application to capture the downlink voice audio.
Permission level: system_basic
Authorization mode: system_grant
Enable via ACL: true
Valid since: 10
ohos.permission.GET_WIFI_INFO_INTERNAL
Allows a system process to obtain Wi-Fi parameters.
Permission level: system_core
Authorization mode: system_grant
Enable via ACL: true
Valid since: 8
ohos.permission.ACCESS_BUNDLE_DIR
Allows an application to access the installation directory of another application.
Permission level: system_basic
Authorization mode: system_grant
Enable via ACL: true
Valid since: 9
ohos.permission.CHANGE_ABILITY_ENABLED_STATE
Allows an application to enable or disable an application or component.
Permission level: system_basic
Authorization mode: system_grant
Enable via ACL: true
Valid since: 7
ohos.permission.CLOUDFILE_SYNC_MANAGER
Allows an application to obtain the device-cloud synchronization management capability.
Permission level: system_basic
Authorization mode: system_grant
Enable via ACL: true
Valid since: 10
ohos.permission.DUMP
Allows the basic system information and system ability (SA) information to be dumped.
Permission level: system_core
Authorization mode: system_grant
Enable via ACL: true
Valid since: 9
ohos.permission.DEVICE_STANDBY_EXEMPTION
Allows an application to use resources when the system is in standby mode.
Permission level: system_basic
Authorization mode: system_grant
Enable via ACL: true
Valid since: 10
ohos.permission.PERCEIVE_SMART_POWER_SCENARIO
Allows an application to perceive smart power scenarios.
Permission level: system_basic
Authorization mode: system_grant
Enable via ACL: true
Valid since: 12
ohos.permission.MANAGE_CAMERA_CONFIG
Allows an application to enable or disable cameras globally.
Permission level: system_basic
Authorization mode: system_grant
Enable via ACL: true
Valid since: 9
ohos.permission.MANAGE_AUDIO_CONFIG
Allows an application to mute microphones globally.
Permission level: system_basic
Authorization mode: system_grant
Enable via ACL: true
Valid since: 9
ohos.permission.MICROPHONE_CONTROL
Allows an application to control the microphone, for example, persisting the mute of the microphone globally.
Permission level: system_core
Authorization mode: system_grant
Enable via ACL: true
Valid since: 12
ohos.permission.START_DLP_CRED
Allows a system application or system service to start the DLP credential management application.
Permission level: system_basic
Authorization mode: system_grant
Enable via ACL: true
Valid since: 12
ohos.permission.START_SHORTCUT
Allows an application to start shortcuts.
Permission level: system_basic
Authorization mode: system_grant
Enable via ACL: true
Valid since: 12
ohos.permission.PRELOAD_UI_EXTENSION_ABILITY
Allows an application to preload a UIExtensionAbility instance.
Permission level: system_basic
Authorization mode: system_grant
Enable via ACL: true
Valid since: 12
ohos.permission.MANAGE_DISPOSED_APP_STATUS
Allows an application to set and query the application handling state.
Permission level: system_core
Authorization mode: system_grant
Enable via ACL: true
Valid since: 9
ohos.permission.GET_DISPOSED_APP_STATUS
Allows an application to obtain the disposed application status.
Permission level: system_basic
Authorization mode: system_grant
Enable via ACL: true
Valid since: 12
ohos.permission.FILE_ACCESS_MANAGER
Allows a file management application to access user data files through the FAF.
Permission level: system_basic
Authorization mode: system_grant
Enable via ACL: true
Valid since: 9
ohos.permission.ACCESS_PUSH_SERVICE
Allows an application to access the Ability of the push service.
Permission level: system_basic
Authorization mode: system_grant
Enable via ACL: true
Valid since: 9
ohos.permission.MANAGE_NET_STRATEGY
Allows an application to obtain network strategy information or modify network strategy settings.
Permission level: system_basic
Authorization mode: system_grant
Enable via ACL: true
Valid since: 10
ohos.permission.INPUT_MONITORING
Allows an application to listen for input events.
Permission level: system_basic
Authorization mode: system_grant
Enable via ACL: true
Valid since: 7
Changelog: The permission level is system_core in API versions 7 to 11 and system_basic since API versions 12.
ohos.permission.GET_WIFI_LOCAL_MAC
Allows an application to obtain the MAC address of the local Wi-Fi device.
Permission level: system_basic
Authorization mode: system_grant
Enable via ACL: true
Valid since: 8
ohos.permission.GET_WIFI_PEERS_MAC
Allows an application to obtain the MAC address of the peer Wi-Fi device.
Permission level: system_core
Authorization mode: system_grant
Enable via ACL: true
Valid since: 8
ohos.permission.securityguard.REQUEST_SECURITY_EVENT_INFO
Allows an application to obtain detailed security event information.
Permission level: system_core
Authorization mode: system_grant
Enable via ACL: true
Valid since: 9
ohos.permission.securityguard.REPORT_SECURITY_INFO
Allows an application to report security information to Security Guard.
Permission level: system_basic
Authorization mode: system_grant
Enable via ACL: true
Valid since: 9
ohos.permission.GET_SENSITIVE_PERMISSIONS
Allows an application to obtain the sensitive permissions that have been granted to other applications.
Permission level: system_basic
Authorization mode: system_grant
Enable via ACL: true
Valid since: 8
ohos.permission.ACCESS_SERVICE_DM
Allows a system application to obtain the authentication and networking capability of distributed devices.
Permission level: system_basic
Authorization mode: system_grant
Enable via ACL: true
Valid since: 10
ohos.permission.UPLOAD_SESSION_MANAGER
Allows an application to manage the upload sessions.
Permission level: system_core
Authorization mode: system_grant
Enable via ACL: true
Valid since: 10
ohos.permission.ABILITY_BACKGROUND_COMMUNICATION
Allows an application to start the Ability component in the background and establish a connection with it.
Permission level: system_basic
Authorization mode: system_grant
Enable via ACL: true
Valid since: 9
ohos.permission.ACCESS_DLP_FILE
Allows configuration and management of the permissions on .dlp files.
Permission level: system_core
Authorization mode: system_grant
Enable via ACL: true
Valid since: 9
ohos.permission.ACCESS_IDS
Allows an application to query the unique identifier of a device.
Permission level: system_core
Authorization mode: system_grant
Enable via ACL: true
Valid since: 9
ohos.permission.ACCESS_MISSIONS
Allows an application to obtain information about running processes and mission in a mission stack.
Permission level: system_basic
Authorization mode: system_grant
Enable via ACL: true
Valid since: 7
Deprecated since: 9
ohos.permission.BUNDLE_ACTIVE_INFO
Allows an application to obtain how long other applications have been running in the foreground or background.
Permission level: system_basic
Authorization mode: system_grant
Enable via ACL: true
Valid since: 7
ohos.permission.CONNECT_IME_ABILITY
Allows an application to bind the InputMethodAbility.
Permission level: system_core
Authorization mode: system_grant
Enable via ACL: true
Valid since: 7
ohos.permission.CONNECT_SCREEN_SAVER_ABILITY
Allows an application to bind the ScreenSaverAbility.
Permission level: system_core
Authorization mode: system_grant
Enable via ACL: true
Valid since: 7
ohos.permission.CONNECTIVITY_INTERNAL
Allows an application to obtain network information or modify network settings. Currently, this permission is available only to system applications.
Permission level: system_basic
Authorization mode: system_grant
Enable via ACL: true
Valid since: 8
ohos.permission.CONTROL_TASK_SYNC_ANIMATOR
Allows an application to use sync task animations.
Permission level: system_core
Authorization mode: system_grant
Enable via ACL: true
Valid since: 7
ohos.permission.DOWNLOAD_SESSION_MANAGER
Allows an application to manage the download sessions.
Permission level: system_core
Authorization mode: system_grant
Enable via ACL: true
Valid since: 7
ohos.permission.GET_DISTRIBUTED_ACCOUNTS
Allows an application to obtain information about distributed accounts.
Permission level: system_basic
Authorization mode: system_grant
Enable via ACL: true
Valid since: 9
ohos.permission.GET_LOCAL_ACCOUNTS
Allows an application to obtain information about local accounts.
Permission level: system_basic
Authorization mode: system_grant
Enable via ACL: true
Valid since: 9
ohos.permission.GET_TELEPHONY_STATE
Allows an application to read telephony information.
Permission level: system_basic
Authorization mode: system_grant
Enable via ACL: true
Valid since: 8
ohos.permission.ACCESS_BOOSTER_SERVICE
Allows a system ability or system application to call network booster service APIs, such as APIs for network quality perception, network scenario prediction, and network acceleration.
Permission level: system_basic
Authorization mode: system_grant
Enable via ACL: true
Valid since: 12
ohos.permission.GET_WALLPAPER
Allows an application to read wallpaper files.
Permission level: system_basic
Authorization mode: system_grant
Enable via ACL: true
Valid since: 7
ohos.permission.GET_WIFI_CONFIG
Allows an application to obtain the Wi-Fi configuration.
Permission level: system_basic
Authorization mode: system_grant
Enable via ACL: true
Valid since: 8
ohos.permission.GRANT_SENSITIVE_PERMISSIONS
Allows an application to grant sensitive permissions to other applications.
Permission level: system_core
Authorization mode: system_grant
Enable via ACL: true
Valid since: 8
ohos.permission.LAUNCH_DATA_PRIVACY_CENTER
Allows an application to switch from its privacy statement page to the Data & privacy page.
Permission level: system_basic
Authorization mode: system_grant
Enable via ACL: true
Valid since: 7
ohos.permission.LISTEN_BUNDLE_CHANGE
Allows an application to listen for changes in other applications, when they are installed, updated, or uninstalled.
Permission level: system_basic
Authorization mode: system_grant
Enable via ACL: true
Valid since: 7
ohos.permission.MANAGE_BLUETOOTH
Allows an application to pair with a Bluetooth device and access the Contacts or messages of the device.
Permission level: system_basic
Authorization mode: system_grant
Enable via ACL: true
Valid since: 7
ohos.permission.MANAGE_DISTRIBUTED_ACCOUNTS
Allows an application to manage information about distributed accounts.
Permission level: system_basic
Authorization mode: system_grant
Enable via ACL: true
Valid since: 9
ohos.permission.MANAGE_MEDIA_RESOURCES
Allows an application to obtain and manage the media resources that are being played on the device.
Permission level: system_basic
Authorization mode: system_grant
Enable via ACL: true
Valid since: 9
ohos.permission.MANAGE_SECURE_SETTINGS
Allows an application to modify security settings.
Permission level: system_basic
Authorization mode: system_grant
Enable via ACL: true
Valid since: 7
ohos.permission.MANAGE_WIFI_CONNECTION
Allows an application to manage Wi-Fi connections.
Permission level: system_core
Authorization mode: system_grant
Enable via ACL: true
Valid since: 8
ohos.permission.MANAGE_WIFI_HOTSPOT
Allows an application to enable or disable Wi-Fi hotspots.
Permission level: system_core
Authorization mode: system_grant
Enable via ACL: true
Valid since: 8
ohos.permission.NOTIFICATION_AGENT_CONTROLLER
Allows an application to send agent-powered notifications.
Permission level: system_core
Authorization mode: system_grant
Enable via ACL: true
Valid since: 9
ohos.permission.PLACE_CALL
Allows an application to make calls without starting the dialer.
Permission level: system_basic
Authorization mode: system_grant
Enable via ACL: true
Valid since: 8
ohos.permission.POWER_OPTIMIZATION
Allows an application to set power saving mode, obtain configuration of the power saving mode, and receive notifications of the configuration changes.
Permission level: system_basic
Authorization mode: system_grant
Enable via ACL: true
Valid since: 7
ohos.permission.PROVISIONING_MESSAGE
Allows the Super Device Manager application to be activated.
Permission level: system_core
Authorization mode: system_grant
Enable via ACL: true
Valid since: 9
ohos.permission.radio.ACCESS_FM_AM
Allows an application to access radio services.
Permission level: system_core
Authorization mode: system_grant
Enable via ACL: true
Valid since: 7
ohos.permission.READ_SCREEN_SAVER
Allows an application to read the screen saver information, such as the list of screen savers that have been installed and the activated one.
Permission level: system_basic
Authorization mode: system_grant
Enable via ACL: true
Valid since: 7
ohos.permission.REBOOT
Allows an application to restart the device.
Permission level: system_basic
Authorization mode: system_grant
Enable via ACL: true
Valid since: 7
ohos.permission.REBOOT_RECOVERY
Allows an application to restart the device and enter Recovery mode.
Permission level: system_basic
Authorization mode: system_grant
Enable via ACL: true
Valid since: 7
ohos.permission.REFRESH_USER_ACTION
Allows an application to reset the screen timeout counter when a user input event occurs, such as pressing a key or touching the screen.
Permission level: system_basic
Authorization mode: system_grant
Enable via ACL: true
Valid since: 7
ohos.permission.REMOVE_CACHE_FILES
Allows the cache of the specified application to be cleared.
Permission level: system_basic
Authorization mode: system_grant
Enable via ACL: true
Valid since: 7
ohos.permission.REQUIRE_FORM
Allows an application to obtain the Ability Form.
Permission level: system_basic
Authorization mode: system_grant
Enable via ACL: true
Valid since: 7
ohos.permission.REVOKE_SENSITIVE_PERMISSIONS
Allows an application to revoke the sensitive permissions it has granted to other applications.
Permission level: system_core
Authorization mode: system_grant
Enable via ACL: true
Valid since: 8
ohos.permission.RUN_ANY_CODE
Allows an application to run unsigned code.
Permission level: system_basic
Authorization mode: system_grant
Enable via ACL: true
Valid since: 10
ohos.permission.sec.ACCESS_UDID
Allows an application to obtain the Unified Device ID (UDID).
Permission level: system_basic
Authorization mode: system_grant
Enable via ACL: true
Valid since: 7
ohos.permission.securityguard.REQUEST_SECURITY_MODEL_RESULT
Allows an application to obtain the device risk status.
Permission level: system_basic
Authorization mode: system_grant
Enable via ACL: true
Valid since: 9
ohos.permission.SET_DEFAULT_APPLICATION
Allows an application to set and reset default applications.
Permission level: system_core
Authorization mode: system_grant
Enable via ACL: true
Valid since: 9
ohos.permission.SET_TELEPHONY_STATE
Allows an application to set the telephony state.
Permission level: system_basic
Authorization mode: system_grant
Enable via ACL: true
Valid since: 8
ohos.permission.SET_TIME
Allows an application to set the system time.
Permission level: system_basic
Authorization mode: system_grant
Enable via ACL: true
Valid since: 7
ohos.permission.SET_TIME_ZONE
Allows an application to set the system time zone.
Permission level: system_basic
Authorization mode: system_grant
Enable via ACL: true
Valid since: 7
ohos.permission.SET_WIFI_CONFIG
Allows an application to configure Wi-Fi information.
Permission level: system_basic
Authorization mode: system_grant
Enable via ACL: true
Valid since: 8
ohos.permission.START_ABILIIES_FROM_BACKGROUND
Allows an application to start FAs in the background.
Permission level: system_basic
Authorization mode: system_grant
Enable via ACL: true
Valid since: 7
Deprecated since: 9
ohos.permission.START_INVISIBLE_ABILITY
Allows an application to start an invisible ability.
Permission level: system_core
Authorization mode: system_grant
Enable via ACL: true
Valid since: 9
ohos.permission.STORAGE_MANAGER
Allows an application to call the interfaces of the Storage Manager service to query space statistics and volume information.
Permission level: system_basic
Authorization mode: system_grant
Enable via ACL: true
Valid since: 9
ohos.permission.UPDATE_CONFIGURATION
Allows an application to modify system settings.
Permission level: system_basic
Authorization mode: system_grant
Enable via ACL: true
Valid since: 7
ohos.permission.WRITE_SCREEN_SAVER
Allows an application to modify the screen saver information, such as activating and previewing a screen saver.
Permission level: system_basic
Authorization mode: system_grant
Enable via ACL: true
Valid since: 7
ohos.permission.GET_BLUETOOTH_LOCAL_MAC
Allows an application to obtain the Bluetooth MAC address of the local device.
Permission level: system_basic
Authorization mode: system_grant
Enable via ACL: true
Valid since: 11
ohos.permission.GET_BLUETOOTH_PEERS_MAC
Allows an application to obtain the real Bluetooth MAC address of a device.
Permission level: system_basic
Authorization mode: system_grant
Enable via ACL: true
Valid since: 12
ohos.permission.USE_USER_IDM
Allows an application to access the system identity credential information.
Permission level: system_basic
Authorization mode: system_grant
Enable via ACL: true
Valid since: 8
ohos.permission.MANAGE_USER_IDM
Allows an application to enroll and manage user identity authentication credentials.
Permission level: system_basic
Authorization mode: system_grant
Enable via ACL: true
Valid since: 8
ohos.permission.ACCESS_PIN_AUTH
Allows an application to register the callback for obtaining the PIN during the PIN authentication process.
Permission level: system_basic
Authorization mode: system_grant
Enable via ACL: true
Valid since: 8
ohos.permission.ACCESS_USER_AUTH_INTERNAL
Allows an application to call internal system interfaces of IAM.
Permission level: system_basic
Authorization mode: system_grant
Enable via ACL: true
Valid since: 8
ohos.permission.SUPPORT_USER_AUTH
Allows access to the resource pool of the user authentication widget (auth_widget).
Permission level: system_basic
Authorization mode: system_grant
Enable via ACL: true
Valid since: 10
ohos.permission.ACCESS_SENSING_WITH_ULTRASOUND
Allows an application to use ultrasonic sensing.
Permission level: system_basic
Authorization mode: system_grant
Enable via ACL: true
Valid since: 10
ohos.permission.ACCESS_DISTRIBUTED_HARDWARE
Allows a system service or system application to access distributed hardware resources.
Permission level: system_basic
Authorization mode: system_grant
Enable via ACL: true
Valid since: 11
ohos.permission.INSTANTSHARE_SWITCH_CONTROL
Allows a system service or system application to change the instantshare switch state.
Permission level: system_basic
Authorization mode: system_grant
Enable via ACL: true
Valid since: 11
ohos.permission.ACCESS_INSTANTSHARE_SERVICE
Allows a system service or system application to access the instantshare service.
Permission level: system_basic
Authorization mode: system_grant
Enable via ACL: true
Valid since: 11
ohos.permission.ACCESS_INSTANTSHARE_PRIVATE_ABILITY
Allows a system service or system application to use the instantshare private ability.
Permission level: system_basic
Authorization mode: system_grant
Enable via ACL: true
Valid since: 11
ohos.permission.ACCESS_MCP_AUTHORIZATION
Allows the MCP host application to perform user account authorization and login for its sub-applications.
Permission level: system_basic
Authorization mode: system_grant
Enable via ACL: true
Valid since: 11
ohos.permission.GET_BUNDLE_RESOURCES
Allows an application to obtain resource information of another application.
Permission level: system_basic
Authorization mode: system_grant
Enable via ACL: true
Valid since: 11
ohos.permission.COOPERATE_MANAGER
Allows a system application to enable the ScreenHop feature, which allows the user to use a mouse across multiple devices.
Permission level: system_basic
Authorization mode: system_grant
Enable via ACL: true
Valid since: 11
ohos.permission.PERCEIVE_TRAIL
Allows a system application to use the Multimodal Sensor Data Platform (MSDP) trail perception function.
Permission level: system_basic
Authorization mode: system_grant
Enable via ACL: true
Valid since: 11
ohos.permission.EXECUTE_INSIGHT_INTENT
Allows a system application to execute intent calls.
Permission level: system_basic
Authorization mode: system_grant
Enable via ACL: true
Valid since: 11
ohos.permission.VERIFY_ACTIVATION_LOCK
Allows an application to verify the validity of activation lock credentials.
Permission level: system_basic
Authorization mode: system_grant
Enable via ACL: true
Valid since: 11
ohos.permission.ACCESS_OUC
Allows a system application to start the software update capability.
Permission level: system_basic
Authorization mode: system_grant
Enable via ACL: true
Valid since: 11
ohos.permission.MANAGE_FINGERPRINT_AUTH
Allows an application to call APIs for configuring and managing the fingerprint authentication module.
Permission level: system_basic
Authorization mode: system_grant
Enable via ACL: true
Valid since: 11
ohos.permission.TRUSTED_RING_HASH_DATA_PERMISSION
Allows an application to send data to the trusted ring of critical assets.
Permission level: system_basic
Authorization mode: system_grant
Enable via ACL: true
Valid since: 11
ohos.permission.INPUT_CONTROL_DISPATCHING
Allows a system application to shield the shortcut key distribution logic.
Permission level: system_basic
Authorization mode: system_grant
Enable via ACL: true
Valid since: 11
ohos.permission.MANAGE_TRUSTED_RING
Allows the use of the capabilities provided by the critical asset trusted ring service.
Permission level: system_basic
Authorization mode: system_grant
Enable via ACL: true
Valid since: 11
ohos.permission.USE_TRUSTED_RING
Allows an applications or service to use the critical asset trusted ring.
Permission level: system_basic
Authorization mode: system_grant
Enable via ACL: true
Valid since: 11
ohos.permission.RECEIVE_APP_INSTALL_INFO_CHANGE
Allows an application to listen for the installation progress of other applications.
Permission level: system_basic
Authorization mode: system_grant
Enable via ACL: true
Valid since: 11
ohos.permission.LAUNCH_SPAMSHIELD_PAGE
Allows an application to access the shielded spam pages.
Permission level: system_basic
Authorization mode: system_grant
Enable via ACL: true
Valid since: 12
ohos.permission.ACCESS_SPAMSHIELD_SERVICE
Allows an application to access the spam shield service.
Permission level: system_basic
Authorization mode: system_grant
Enable via ACL: true
Valid since: 12
ohos.permission.ACCESS_SECURITY_PRIVACY_CENTER
Allows a service to access the Security & Privacy Center.
Permission level: system_basic
Authorization mode: system_grant
Enable via ACL: true
Valid since: 11
ohos.permission.GET_SECURITY_PRIVACY_ADVICE
Allows a system application to obtain advice from the Security & Privacy Center.
Permission level: system_core
Authorization mode: system_grant
Enable via ACL: true
Valid since: 11
ohos.permission.SET_SECURITY_PRIVACY_ADVICE
Allows a system application to process the advice provided by the Security & Privacy Center.
Permission level: system_core
Authorization mode: system_grant
Enable via ACL: true
Valid since: 11
ohos.permission.USE_SECURITY_PRIVACY_MESSAGER
Allows a system service to call permission management interfaces.
Permission level: system_core
Authorization mode: system_grant
Enable via ACL: true
Valid since: 11
ohos.permission.GET_PRIVACY_INDICATOR
Allows a system application to obtain details about privacy event notifications.
Permission level: system_basic
Authorization mode: system_grant
Enable via ACL: true
Valid since: 12
ohos.permission.SET_PRIVACY_INDICATOR
Allows a system application to control the presence status of privacy event notifications.
Permission level: system_core
Authorization mode: system_grant
Enable via ACL: true
Valid since: 12
ohos.permission.EXEMPT_PRIVACY_INDICATOR
Allows an application to use permissions without displaying the privacy indicator.
Permission level: system_core
Authorization mode: system_grant
Enable via ACL: true
Valid since: 12
ohos.permission.EXEMPT_CAMERA_PRIVACY_INDICATOR
Allows an application to access the device's camera without displaying the privacy indicator.
Permission level: system_core
Authorization mode: system_grant
Enable via ACL: true
Valid since: 12
ohos.permission.EXEMPT_MICROPHONE_PRIVACY_INDICATOR
Allows an application to access the device's microphone without displaying the privacy indicator.
Permission level: system_core
Authorization mode: system_grant
Enable via ACL: true
Valid since: 12
ohos.permission.EXEMPT_LOCATION_PRIVACY_INDICATOR
Allows an application to use the location service without displaying the privacy indicator.
Permission level: system_core
Authorization mode: system_grant
Enable via ACL: true
Valid since: 12
ohos.permission.EXEMPT_PRIVACY_SECURITY_CENTER
Allows a system application to be hidden on the Privacy & Security page.
Permission level: system_core
Authorization mode: system_grant
Enable via ACL: true
Valid since: 13
ohos.permission.GET_SUPER_PRIVACY
Allows a system application to obtain the status of the super privacy mode.
Permission level: system_basic
Authorization mode: system_grant
Enable via ACL: true
Valid since: 12
ohos.permission.SET_SUPER_PRIVACY
Allows a system application to set the super privacy mode.
Permission level: system_core
Authorization mode: system_grant
Enable via ACL: true
Valid since: 12
ohos.permission.ACCESS_PRIVATE_SPACE_MANAGER
Allows a system application or system service to start the PrivateSpace manager.
Permission level: system_basic
Authorization mode: system_grant
Enable via ACL: true
Valid since: 12
ohos.permission.ACCESS_PRIVATE_SPACE_PASSWORD_PROTECT
Allows a system application to call PrivateSpace APIs related to password protection.
Permission level: system_basic
Authorization mode: system_grant
Enable via ACL: true
Valid since: 12
ohos.permission.ACCESS_PASSWORDVAULT_ABILITY
Allows a system application or system service to start the Password Vault ability.
Permission level: system_basic
Authorization mode: system_grant
Enable via ACL: true
Valid since: 11
ohos.permission.ACCESS_TEXTAUTOFILL_ABILITY
Allows a system application or system service to start the text autofill ability.
Permission level: system_basic
Authorization mode: system_grant
Enable via ACL: true
Valid since: 12
ohos.permission.ACCESS_LOWPOWER_MANAGER
Allows a system application or system service to send messages to LowpowerManager.
Permission level: system_basic
Authorization mode: system_grant
Enable via ACL: true
Valid since: 11
ohos.permission.MANAGE_APP_BOOT
Allows a system application to set auto boot options for other applications.
Permission level: system_basic
Authorization mode: system_grant
Enable via ACL: true
Valid since: 11
ohos.permission.ACCESS_DDK_HID
Allows extended peripheral drivers to access the HID DDK interfaces to implement development of HID extended peripheral drivers.
Permission level: system_basic
Authorization mode: system_grant
Enable via ACL: true
Valid since: 11
ohos.permission.ACCESS_DDK_USB
Allows extended peripheral drivers to access the USB DDK interfaces to implement development of USB extended peripheral drivers.
Permission level: system_basic
Authorization mode: system_grant
Enable via ACL: true
Valid since: 11
ohos.permission.ACCESS_ACCOUNT_KIT_SERVICE
Allows the account service to query and modify account data.
Permission level: system_basic
Authorization mode: system_grant
Enable via ACL: true
Valid since: 11
ohos.permission.REQUEST_ANONYMOUS_ATTEST
Allows a system application to use the device anonymous attestation capability.
Permission level: system_basic
Authorization mode: system_grant
Enable via ACL: true
Valid since: 11
ohos.permission.ACCESS_ACCOUNT_KIT_UI
Allows a system application to display the account user authentication page.
Permission level: system_basic
Authorization mode: system_grant
Enable via ACL: true
Valid since: 11
ohos.permission.START_RECENT_ABILITY
Allows an application to start the specified UIAbility or the last started instance if the UIAbility has multiple instances.
Permission level: system_basic
Authorization mode: system_grant
Enable via ACL: true
Valid since: 11
ohos.permission.MANAGE_CLOUD_SYNC_CONFIG
Allows an application that has accessed the cloud to manage the device-cloud sync configuration.
Permission level: system_basic
Authorization mode: system_grant
Enable via ACL: true
Valid since: 11
ohos.permission.ACCESS_FINDDEVICE
Allows an application to start the Find Device app.
Permission level: system_basic
Authorization mode: system_grant
Enable via ACL: true
Valid since: 11
ohos.permission.MANAGE_FINDSERVICE
Allows a system application to obtain and modify the setting of Find My Phone.
Permission level: system_basic
Authorization mode: system_grant
Enable via ACL: true
Valid since: 11
ohos.permission.READ_FINDSERVICE
Allows a system application to read the status of Find Device.
Permission level: system_basic
Authorization mode: system_grant
Enable via ACL: true
Valid since: 12
ohos.permission.MANAGE_USB_CONFIG
Allows an application to manage the USB device functions and ports.
Permission level: system_basic
Authorization mode: system_grant
Enable via ACL: true
Valid since: 11
ohos.permission.START_SYSTEM_DIALOG
Allows an application to start modal system dialog boxes.
Permission level: system_basic
Authorization mode: system_grant
Enable via ACL: true
Valid since: 11
ohos.permission.ACCESS_STATUSBAR_ICON
Allows an application to access the status bar icons.
Permission level: system_basic
Authorization mode: system_grant
Enable via ACL: true
Valid since: 11
ohos.permission.MANAGE_SYSTEM_AUDIO_EFFECTS
Allows an application to manage the system audio effects.
Permission level: system_basic
Authorization mode: system_grant
Enable via ACL: true
Valid since: 11
ohos.permission.SECURE_PASTE
Allows an application to read the pasteboard via silent access.
Permission level: system_core
Authorization mode: system_grant
Enable via ACL: true
Valid since: 11
ohos.permission.SET_CODE_PROTECT_INFO
Allows a system application to set the public key and working secret ciphertext in the cloud and agrees on a key for code protection.
Permission level: system_core
Authorization mode: system_grant
Enable via ACL: true
Valid since: 11
ohos.permission.SET_ADVANCED_SECURITY_MODE
Allows an application to set the advanced security mode configuration.
Permission level: system_core
Authorization mode: system_grant
Enable via ACL: true
Valid since: 11
ohos.permission.SET_DEVELOPER_MODE
Allows an application to set the developer mode configuration.
Permission level: system_core
Authorization mode: system_grant
Enable via ACL: true
Valid since: 11
ohos.permission.DISABLE_PERMISSION_DIALOG
Allows a system application to set whether an application can start the permission dialog box.
Permission level: system_core
Authorization mode: system_grant
Enable via ACL: true
Valid since: 11
ohos.permission.MANAGE_ACTIVATION_LOCK
Allows an application to manage the activation lock of a device.
Permission level: system_basic
Authorization mode: system_grant
Enable via ACL: true
Valid since: 11
ohos.permission.MANAGE_PRIVATE_PHOTOS
Allows an application to access the built-in hidden albums and files in the albums.
Permission level: system_core
Authorization mode: system_grant
Enable via ACL: true
Valid since: 11
ohos.permission.INTERCEPT_INPUT_EVENT
Allows an application to intercept input events.
Permission level: system_basic
Authorization mode: system_grant
Enable via ACL: true
Valid since: 11
Changelog: The permission level is system_core in API version 11 and system_basic since API versions 12.
ohos.permission.RECORD_VOICE_CALL
Allows an application to record voice calls.
Permission level: system_core
Authorization mode: system_grant
Enable via ACL: true
Valid since: 11
ohos.permission.MANAGE_APP_INSTALL_INFO
Allows an application to create and manage application installation tasks.
Permission level: system_core
Authorization mode: system_grant
Enable via ACL: true
Valid since: 11
ohos.permission.ACCESS_ADVANCED_SECURITY_MODE
Allows a system application to access the advanced security mode configuration page.
Permission level: system_basic
Authorization mode: system_grant
Enable via ACL: true
Valid since: 11
ohos.permission.ACCESS_HIVIEWX
Allows a system application to start HiViewX, which displays the User Experience Improvement Program page.
Permission level: system_basic
Authorization mode: system_grant
Enable via ACL: true
Valid since: 11
ohos.permission.ACCESS_HIVIEWCARE
Allows a system application to start HiViewCare.
Permission level: system_basic
Authorization mode: system_grant
Enable via ACL: true
Valid since: 11
ohos.permission.CONNECT_UI_EXTENSION_ABILITY
Allows a system service to connect to UIExtensionAbility.
Permission level: system_core
Authorization mode: system_grant
Enable via ACL: true
Valid since: 11
ohos.permission.SET_SANDBOX_POLICY
Allows a system application to set dynamic sandbox policies.
Permission level: system_core
Authorization mode: system_grant
Enable via ACL: true
Valid since: 11
ohos.permission.TRIGGER_ACTIVATIONLOCK
Allows an SA to call Find Device.
Permission level: system_core
Authorization mode: system_grant
Enable via ACL: true
Valid since: 11
ohos.permission.WRITE_PRIVACY_PUSH_DATA
Allows an application to write private Push data to another application.
Permission level: system_core
Authorization mode: system_grant
Enable via ACL: true
Valid since: 11
ohos.permission.READ_PRIVACY_PUSH_DATA
Allows an application to read the private Push data of another application.
Permission level: system_core
Authorization mode: system_grant
Enable via ACL: true
Valid since: 12
ohos.permission.MANAGE_NEARLINK
Allows an application to pair with a NearLink device and access the Contacts or messages of the device.
Permission level: system_basic
Authorization mode: system_grant
Enable via ACL: true
Valid since: 12
ohos.permission.GET_NEARLINK_LOCAL_MAC
Allows an application to obtain the NearLink MAC address of the local device.
Permission level: system_basic
Authorization mode: system_grant
Enable via ACL: true
Valid since: 12
ohos.permission.GET_NEARLINK_PEER_MAC
Allows an application to obtain the NearLink MAC address of the peer device.
Permission level: system_basic
Authorization mode: system_grant
Enable via ACL: true
Valid since: 12
ohos.permission.MANAGE_UWB
Allows a system application to manage the ultra-wideband (UWB) function,
for example, enabling or disabling UWB communication, querying the chip type, and querying UWB capabilities.
Permission level: system_basic
Authorization mode: system_grant
Enable via ACL: true
Valid since: 12
ohos.permission.USE_UWB_RANGING
Allows a system application to use UWB ranging,
for example, opening a session for UWB ranging, starting ranging, stoping ranging, and closing a session.
Permission level: system_basic
Authorization mode: system_grant
Enable via ACL: true
Valid since: 12
ohos.permission.MANAGE_FINDNETWORK
Allows an application to manage the Find Network switch and pair and unpair accessories.
Permission level: system_basic
Authorization mode: system_grant
Enable via ACL: true
Valid since: 12
ohos.permission.OPERATE_FINDNETWORK
Allows an application to call APIs for finding network.
Permission level: system_basic
Authorization mode: system_grant
Enable via ACL: true
Valid since: 12
ohos.permission.QUERY_FINDNETWORK_LOCATION
Allows an application to query the location of an offline device.
Permission level: system_basic
Authorization mode: system_grant
Enable via ACL: true
Valid since: 12
ohos.permission.REGISTER_FINDNETWORK_ACCESSORY
Allows an application or system ability to initiate the process for registering the Find Network accessories.
Permission level: system_basic
Authorization mode: system_grant
Enable via ACL: true
Valid since: 13
ohos.permission.MANAGE_RGM
Allows a system service or system application to manage RGM.
Permission level: system_core
Authorization mode: system_grant
Enable via ACL: true
Valid since: 12
ohos.permission.ACCESS_PROTOCOL_DFX_DATA
Allows a system application to access communication failure information and system statistics.
Permission level: system_basic
Authorization mode: system_grant
Enable via ACL: true
Valid since: 12
ohos.permission.ACCESS_PROTOCOL_DFX_STATE
Allows a system application to enable or disable the switches related to communication protocols.
Permission level: system_basic
Authorization mode: system_grant
Enable via ACL: true
Valid since: 12
ohos.permission.ACCESS_CMAP_SERVICE
Allows a system application to access the cellular map service.
Permission level: system_basic
Authorization mode: system_grant
Enable via ACL: true
Valid since: 14
ohos.permission.MANAGE_USER_ACCOUNT_INFO
Allows a system application or an SA to call the account service.
Permission level: system_core
Authorization mode: system_grant
Enable via ACL: true
Valid since: 12
ohos.permission.ALLOW_TIPS_ACCESS
Allows a system application to start the exposed components of another system application.
Permission level: system_basic
Authorization mode: system_grant
Enable via ACL: true
Valid since: 12
ohos.permission.ACCESS_AI_ABILITY
Allows a system application or an SA to access the AI ability.
Permission level: system_basic
Authorization mode: system_grant
Enable via ACL: true
Valid since: 12
ohos.permission.READ_HEALTH_MOTION
Allows a system application to read the activity ring information, such as the step count.
Permission level: system_basic
Authorization mode: system_grant
Enable via ACL: true
Valid since: 12
ohos.permission.hsdr.REQUEST_HSDR
Allows a system application to access the OpenHarmony Security Detection and Response (HSDR) function of querying the security policies from the cloud.
Permission level: system_basic
Authorization mode: system_grant
Enable via ACL: true
Valid since: 12
ohos.permission.WRITE_GTOKEN_POLICY
Allows a system application to write application control policies.
Permission level: system_core
Authorization mode: system_grant
Enable via ACL: true
Valid since: 12
ohos.permission.READ_GTOKEN_POLICY
Allows a system application to read application control policies.
Permission level: system_basic
Authorization mode: system_grant
Enable via ACL: true
Valid since: 12
ohos.permission.NOTIFY_DEBUG_ASSERT_RESULT
Allows a system application to set the assertion debugging result.
Permission level: system_basic
Authorization mode: system_grant
Enable via ACL: true
Valid since: 12
ohos.permission.QUERY_PASSWORD_VAULT_DATA
Allows a system application to obtain password vault data.
Permission level: system_basic
Authorization mode: system_grant
Enable via ACL: true
Valid since: 12
ohos.permission.WRITE_ACCOUNT_LOGIN_STATE
Allows user account login status to be written to the data management service.
Permission level: system_basic
Authorization mode: system_grant
Enable via ACL: true
Valid since: 12
ohos.permission.INTERACT_ACROSS_LOCAL_ACCOUNTS_AS_USER
Allows a service in the U0 user space to call the account APIs opened.
Permission level: system_core
Authorization mode: system_grant
Enable via ACL: true
Valid since: 12
ohos.permission.SUBSCRIBE_NOTIFICATION_WINDOW_STATE
Allows an application to subscribe to the broadcasts sent when the notification window is displayed or collapsed.
Permission level: system_basic
Authorization mode: system_grant
Enable via ACL: true
Valid since: 12
ohos.permission.CHANGE_DISPLAYMODE
Allows a system application to change the display mode.
Permission level: system_core
Authorization mode: system_grant
Enable via ACL: true
Valid since: 12
ohos.permission.MIGRATE_DATA
Allows a system application to migrate data.
Permission level: system_core
Authorization mode: system_grant
Enable via ACL: true
Valid since: 12
ohos.permission.ACCESS_DYNAMIC_ICON
Allows a system application to use dynamic icons.
Permission level: system_basic
Authorization mode: system_grant
Enable via ACL: true
Valid since: 12
ohos.permission.CHANGE_BUNDLE_UNINSTALL_STATE
Allows a system application to change the uninstall status of the specified application.
Permission level: system_core
Authorization mode: system_grant
Enable via ACL: true
Valid since: 12
ohos.permission.MANAGE_STYLUS_EVENT
Allows a system application to use the stylus capabilities.
Permission level: system_basic
Authorization mode: system_grant
Enable via ACL: true
Valid since: 12
ohos.permission.USE_CLOUD_DRIVE_SERVICE
Allows a system application or service to use the DriveServiceAbility of the cloud space service to perform device-cloud sync.
Permission level: system_basic
Authorization mode: system_grant
Enable via ACL: true
Valid since: 12
ohos.permission.USE_CLOUD_BACKUP_SERVICE
Allows a system application or service to trigger the BackupServiceAbility of the cloud space service to implement backup and backup-related event notifications.
Permission level: system_basic
Authorization mode: system_grant
Enable via ACL: true
Valid since: 12
ohos.permission.USE_CLOUD_COMMON_SERVICE
Allows a system application to obtain cloud space information and resources through the CommonServiceAbility of the cloud space service.
Permission level: system_basic
Authorization mode: system_grant
Enable via ACL: true
Valid since: 12
ohos.permission.PRELOAD_APPLICATION
Allows a system application or service to preload application processes.
Permission level: system_basic
Authorization mode: system_grant
Enable via ACL: true
Valid since: 12
ohos.permission.MANAGE_INPUT_INFRARED_EMITTER
Allows a system application to use infrared interfaces.
Permission level: normal
Authorization mode: system_grant
Enable via ACL: true
Valid since: 12
ohos.permission.ENABLE_EXPERIENCE_HBM
Allows an application to enable High Brightness Mode (HBM) for the screen.
Permission level: system_basic
Authorization mode: system_grant
Enable via ACL: true
Valid since: 13
ohos.permission.SET_PROCESS_CACHE_STATE
Allows an application to set whether to support application cache and quick startup after cached.
Permission level: system_basic
Authorization mode: system_grant
Enable via ACL: true
Valid since: 12
ohos.permission.ACCESS_SYSTEM_APP_CERT
Allows the caller to manage and use system service certificate credentials.
Permission level: system_core
Authorization mode: system_grant
Enable via ACL: true
Valid since: 12
ohos.permission.ACCESS_USER_TRUSTED_CERT
Allows the caller to manage user CA certificates.
Permission level: system_core
Authorization mode: system_grant
Enable via ACL: true
Valid since: 12
ohos.permission.ACCESS_LOCAL_BACKUP
Allows an application to access the local backup directory.
Permission level: system_basic
Authorization mode: system_grant
Enable via ACL: true
Valid since: 12
ohos.permission.CAST_AUDIO_OUTPUT
Allows the system to cast audio or collaborate with another application to cast audio.
Permission level: system_core
Authorization mode: system_grant
Enable via ACL: true
Valid since: 12
ohos.permission.WRITE_RINGTONE
Allows an application to write the ring tone library.
Permission level: system_basic
Authorization mode: system_grant
Enable via ACL: true
Valid since: 12
ohos.permission.GET_ACCOUNT_MINORS_INFO
Allows a system application to obtain information about the minor users (users not of the legal age) of a user account.
Permission level: system_basic
Authorization mode: system_grant
Enable via ACL: true
Valid since: 12
ohos.permission.ACCESS_LOCAL_THEME
Allows a system application to access the local theme information.
Permission level: system_basic
Authorization mode: system_grant
Enable via ACL: true
Valid since: 12
ohos.permission.ACCESS_SHADER_CACHE_DIR
Allows a system application to access the shader_cache directory.
Permission level: system_core
Authorization mode: system_grant
Enable via ACL: true
Valid since: 12
ohos.permission.INSTALL_CLONE_BUNDLE
Allows an application to install a cloned application.
Permission level: system_core
Authorization mode: system_grant
Enable via ACL: true
Valid since: 12
ohos.permission.UNINSTALL_CLONE_BUNDLE
Allows an application to uninstall a cloned application.
Permission level: system_core
Authorization mode: system_grant
Enable via ACL: true
Valid since: 12
ohos.permission.ACCESS_SCREEN_LOCK_MEDIA_DATA
Allows an application to access images and videos when the screen is locked.
Permission level: system_core
Authorization mode: system_grant
Enable via ACL: true
Valid since: 12
ohos.permission.ACCESS_SCREEN_LOCK_ALL_DATA
Allows an application to access sensitive data, such as images and videos, call logs, call recordings, SMS messages, and emails, when the screen is locked.
Permission level: system_core
Authorization mode: system_grant
Enable via ACL: true
Valid since: 12
ohos.permission.ACCESS_DEVICE_COLLABORATION_PRIVATE_ABILITY
Allows a system service or system application to access the device collaboration private ability.
Permission level: system_basic
Authorization mode: system_grant
Enable via ACL: true
Valid since: 12
ohos.permission.ACCESS_FILE_CONTENT_SHARE
Allows a system service or system application to access shared files.
Permission level: system_basic
Authorization mode: system_grant
Enable via ACL: true
Valid since: 12
ohos.permission.ACCESS_RINGTONE_RESOURCE
Allows a system application to access and write the ring tone public directory.
Permission level: system_core
Authorization mode: system_grant
Enable via ACL: true
Valid since: 12
ohos.permission.ACCESS_SUBSCRIPTION_CAPSULE_DATA
Allows a system application to access the subscribed capsule data.
Permission level: system_basic
Authorization mode: system_grant
Enable via ACL: true
Valid since: 12
ohos.permission.ACCESS_SEARCH_SERVICE
Allows a system application to call the local search ability provided by the fusion search service.
Permission level: system_basic
Authorization mode: system_grant
Enable via ACL: true
Valid since: 12
ohos.permission.INJECT_INPUT_EVENT
Allows a system application to inject input events.
Permission level: system_core
Authorization mode: system_grant
Enable via ACL: true
Valid since: 12
ohos.permission.QUERY_SECURITY_EVENT
Allows an application to obtain detailed security event information.
Permission level: system_basic
Authorization mode: system_grant
Enable via ACL: true
Valid since: 12
ohos.permission.REPORT_SECURITY_EVENT
Allows an application to report security events to Security Guard.
Permission level: system_basic
Authorization mode: system_grant
Enable via ACL: true
Valid since: 12
ohos.permission.QUERY_SECURITY_MODEL_RESULT
Allows an application to query the security model execution result.
Permission level: system_basic
Authorization mode: system_grant
Enable via ACL: true
Valid since: 12
ohos.permission.MANAGE_SECURITY_GUARD_CONFIG
Allows an application to manage Security Guard configuration.
Permission level: system_basic
Authorization mode: system_grant
Enable via ACL: true
Valid since: 12
ohos.permission.COLLECT_SECURITY_EVENT
Allows an application to collect security events.
Permission level: system_core
Authorization mode: system_grant
Enable via ACL: true
Valid since: 12
ohos.permission.QUERY_SECURITY_POLICY_FROM_CLOUD
Allows an application to query security policies from the cloud.
Permission level: system_basic
Authorization mode: system_grant
Enable via ACL: true
Valid since: 12
ohos.permission.REPORT_SECURITY_EVENT_TO_CLOUD
Allows an application to report security events to the cloud.
Permission level: system_basic
Authorization mode: system_grant
Enable via ACL: true
Valid since: 12
ohos.permission.ACCESS_SCAN_SERVICE
Allows a system application to invoke the code dispatching capability provided by the scan-to-access service.
Permission level: system_basic
Authorization mode: system_grant
Enable via ACL: true
Valid since: 12
ohos.permission.ACCESS_FACTORY_OTA_DIR
Allows a system application to access the over-the-air update directory.
Permission level: system_basic
Authorization mode: system_grant
Enable via ACL: true
Valid since: 12
ohos.permission.MANAGE_MOUSE_CURSOR
Allows a system application to set the mouse cursor status.
Permission level: system_core
Authorization mode: system_grant
Enable via ACL: true
Valid since: 12
ohos.permission.FILTER_INPUT_EVENT
Allows a system application to filter input events.
Permission level: system_core
Authorization mode: system_grant
Enable via ACL: true
Valid since: 12
ohos.permission.ACTIVATE_DEVICE_PSI
Allows a system application or system ability to report the device activation status.
Permission level: system_basic
Authorization mode: system_grant
Enable via ACL: true
Valid since: 12
ohos.permission.DUMP_AUDIO
Allows an application to dump audio data to a local storage device.
Permission level: system_core
Authorization mode: system_grant
Enable via ACL: true
Valid since: 12
ohos.permission.RECEIVE_FUSION_MESSAGES
Allows a system application or system ability to receive fusion service messages.
Permission level: system_basic
Authorization mode: system_grant
Enable via ACL: true
Valid since: 12
ohos.permission.ACCESS_FUSION_MANAGER
Allows a system ability or system application to access the fusion service.
Permission level: system_basic
Authorization mode: system_grant
Enable via ACL: true
Valid since: 12
ohos.permission.PUBLISH_LOCATION_EVENT
Allows an application to publish common events related to location management.
Permission level: system_basic
Authorization mode: system_grant
Enable via ACL: true
Valid since: 12
ohos.permission.ACCESS_MULTICORE_HYBRID_ABILITY
Allows an application to access the system service APIs of the smart watch.
Permission level: system_basic
Authorization mode: system_grant
Enable via ACL: true
Valid since: 12
ohos.permission.ACCESS_DEVICE_COLLABORATION_SERVICE
Allows an application to use the multi-screen collaboration service.
Permission level: system_basic
Authorization mode: system_grant
Enable via ACL: true
Valid since: 12
ohos.permission.GET_APP_DOMAIN_BUNDLE_INFO
Allows an application to access the mappings between applications and domain names.
Permission level: system_basic
Authorization mode: system_grant
Enable via ACL: true
Valid since: 12
ohos.permission.OPEN_FILE
Allows a system application to start the File Manager application to open files or folders.
Permission level: system_basic
Authorization mode: system_grant
Enable via ACL: true
Valid since: 12
ohos.permission.PROCESS_FILE_COPY_PASTE
Allows a system application to start the File Manager application to copy, cut, and paste files.
Permission level: system_basic
Authorization mode: system_grant
Enable via ACL: true
Valid since: 12
ohos.permission.CLEAR_RECYCLEBIN
Allows a system application to start the File Manager application to clear the trash.
Permission level: system_basic
Authorization mode: system_grant
Enable via ACL: true
Valid since: 12
ohos.permission.GET_FILE_THUMBNAIL
Allows a system ability to obtain file thumbnails.
Permission level: system_basic
Authorization mode: system_grant
Enable via ACL: true
Valid since: 12
ohos.permission.NETWORK_DHCP
Allows a system application to apply for IP addresses from the DHCP server.
Permission level: system_basic
Authorization mode: system_grant
Enable via ACL: true
Valid since: 12
ohos.permission.ALLOW_CONNECT_CAR
Allows an application to connect to a telematics device.
Permission level: system_basic
Authorization mode: system_grant
Enable via ACL: true
Valid since: 12
ohos.permission.MANAGE_NET_FIREWALL
Allows a system application to configure firewall rules.
Permission level: system_basic
Authorization mode: system_grant
Enable via ACL: true
Valid since: 12
ohos.permission.GET_NET_FIREWALL
Allows a system application to obtain firewall rules and firewall interception records.
Permission level: system_basic
Authorization mode: system_grant
Enable via ACL: true
Valid since: 12
ohos.permission.ACCESS_IDM_WIDGET
Allows a system application to access the widget for credential enrollment.
Permission level: system_basic
Authorization mode: system_grant
Enable via ACL: true
Valid since: 12
ohos.permission.MANAGE_ACCESSORY
Allows an application to obtain information about accessories (such as the keyboard and mouse), send data to accessories, and obtain responses from them.
Permission level: system_basic
Authorization mode: system_grant
Enable via ACL: true
Valid since: 12
ohos.permission.COLLECT_ACCESSORY_LOG
Allows an application to obtain logs of accessories (such as the keyboard and mouse).
Permission level: system_basic
Authorization mode: system_grant
Enable via ACL: true
Valid since: 12
ohos.permission.INSTALL_INTERNALTESTING_BUNDLE
Allows an application to install beta applications.
Permission level: system_core
Authorization mode: system_grant
Enable via ACL: true
Valid since: 12
ohos.permission.PUBLISH_DISPLAY_ROTATION_EVENT
Allows a system ability to send screen rotation events to applications or other system abilities.
Permission level: system_core
Authorization mode: system_grant
Enable via ACL: true
Valid since: 12
ohos.permission.PUBLISH_CAST_PLUGGED_EVENT
Allows a system ability to send the projection cable plug-in and plug-out events to applications or other system abilities.
Permission level: system_core
Authorization mode: system_grant
Enable via ACL: true
Valid since: 12
ohos.permission.GET_ETHERNET_LOCAL_MAC
Allows an application to obtain the current MAC address of the Ethernet.
Permission level: system_basic
Authorization mode: system_grant
Enable via ACL: true
Valid since: 13
ohos.permission.ALLOW_SHOW_NON_SECURE_WINDOWS
Allows a modal UIExtension to unhide non-secure windows.
Permission level: system_basic
Authorization mode: system_grant
Enable via ACL: true
Valid since: 12
ohos.permission.ACCESS_DISTRIBUTED_MODEM
Allows a system service to access distributed modems.
Permission level: system_basic
Authorization mode: system_grant
Enable via ACL: true
Valid since: 13
ohos.permission.GET_TELEPHONY_ESIM_STATE
Allows a system application to obtain eSIM profile information and data written on the device chip when the eSIM is activated.
Permission level: system_basic
Authorization mode: system_grant
Enable via ACL: true
Valid since: 14
ohos.permission.SET_TELEPHONY_ESIM_STATE
Allows a system application to modify the eSIM profile and upgrade the eSIM.
Permission level: system_basic
Authorization mode: system_grant
Enable via ACL: true
Valid since: 14
ohos.permission.CAMERA_BACKGROUND
Allows a system application to use the camera in the background.
Permission level: system_core
Authorization mode: system_grant
Enable via ACL: true
Valid since: 13
ohos.permission.CALLED_TRANSITION_ON_LOCK_SCREEN
Allows an application to be started by another application on the lock screen page and redirected.
Permission level: system_basic
Authorization mode: system_grant
Enable via ACL: true
Valid since: 13
ohos.permission.CALLED_BELOW_LOCK_SCREEN
Allows an application to start even when the screen is locked.
Permission level: system_basic
Authorization mode: system_grant
Enable via ACL: true
Valid since: 13
ohos.permission.ACCESS_ANALYTICS
Allows a system service to access and read files in /data/log/faultlog/faultlogger directory.
Permission level: system_basic
Authorization mode: system_grant
Enable via ACL: true
Valid since: 12
ohos.permission.START_RESTORE_NOTIFICATION
Allows a system application to subscribe to the restore start event of the backup and restore framework.
Permission level: system_basic
Authorization mode: system_grant
Enable via ACL: true
Valid since: 13
ohos.permission.READ_WRITE_USB_DEV
Allows an application to connect to a device and read and write the device data via USB for debugging purposes.
Currently, this permission is available only to 2-in-1 device applications.
Permission level: system_basic
Authorization mode: system_grant
Enable via ACL: true
Valid since: 13
ohos.permission.READ_WRITE_USER_FILE
Allows an application to access and modify files in user directories.
Currently, this permission is available only to 2-in-1 device applications.
Permission level: system_basic
Authorization mode: system_grant
Enable via ACL: true
Valid since: 13
ohos.permission.READ_WEATHER_DATA
Allows an application to read weather data.
Permission level: system_basic
Authorization mode: system_grant
Enable via ACL: true
Valid since: 14
ohos.permission.ACCESS_MCU_LOG_DIR
Allows a system application to access the microcontroller unit (MCU) log directory.
Permission level: system_basic
Authorization mode: system_grant
Enable via ACL: true
Valid since: 12
ohos.permission.GRANT_SHORT_TERM_WRITE_MEDIAVIDEO
Allows a system application or system service to grant third-party applications the temporary permission to save images and videos for the specified period of time.
Permission level: system_core
Authorization mode: system_grant
Enable via ACL: true
Valid since: 12
ohos.permission.CHECK_QUICKFIX_RESULT
Allows a system service or system application to check the patch installation result.
Permission level: system_core
Authorization mode: system_grant
Enable via ACL: true
Valid since: 12
Changelog: This permission is available to system services in API versions 12 to 13. From API version 14, it is available to system applications.
ohos.permission.USER_AUTH_FROM_BACKGROUND
Allows a system application or service to initiate user identity authentication from the background.
Permission level: system_basic
Authorization mode: system_grant
Enable via ACL: true
Valid since: 13
ohos.permission.MANAGE_RECOVERY_KEY
Allows an application to create or remove the recovery key.
Permission level: system_core
Authorization mode: system_grant
Enable via ACL: true
Valid since: 14
ohos.permission.UTILIZE_RECOVERY_KEY
Allows an application to utilize the recovery key to reset the lock screen password or restore user data.
Permission level: system_core
Authorization mode: system_grant
Enable via ACL: true
Valid since: 14
ohos.permission.GET_RECOVERY_KEY_BRIEF_INFORMATION
Allows an application to obtain brief information about the recovery key.
Permission level: system_basic
Authorization mode: system_grant
Enable via ACL: true
Valid since: 14
ohos.permission.ACCESS_VIRTUAL_KEYBOARD
Allows an application to update the virtual keyboard status or a service to query the virtual keyboard status.
With this permission, the application can update the virtual keyboard status and the service can query the virtual keyboard status. Currently, this permission is available only to applications or services running on 2-in-1 devices.
Permission level: system_basic
Authorization mode: system_grant
Enable via ACL: true
Valid since: 14
ohos.permission.READ_APP_LOCK
Allows a system application to read the application lock state.
Permission level: system_basic
Authorization mode: system_grant
Enable via ACL: true
Valid since: 13
ohos.permission.WRITE_APP_LOCK
Allows a system application to set the application lock state.
Permission level: system_core
Authorization mode: system_grant
Enable via ACL: true
Valid since: 13
ohos.permission.ACCESS_APP_LOCK
Allows an application to access the application lock.
Permission level: system_basic
Authorization mode: system_grant
Enable via ACL: true
Valid since: 13
ohos.permission.kernel.DISABLE_CODE_MEMORY_PROTECTION
Allows an application to disable its runtime code integrity protection.
Currently, this permission is available only to applications running on tablets and 2-in-1 devices.
Permission level: system_basic
Authorization mode: system_grant
Enable via ACL: true
Valid since: 14
ohos.permission.kernel.ALLOW_WRITABLE_CODE_MEMORY
Allows an application to apply for writable and executable anonymous memory.
This permission is available to the applications developed using the cross-platform framework. Currently, it is available only to applications running on tablets and 2-in-1 devices.
Permission level: system_basic
Authorization mode: system_grant
Enable via ACL: true
Valid since: 14
ohos.permission.MANAGE_UDMF_APP_SHARE_OPTION
Allows an application to set or remove the sharing range of the data supported by the UDMF.
Permission level: system_basic
Authorization mode: system_grant
Enable via ACL: true
Valid since: 14
ohos.permission.MANAGE_PASTEBOARD_APP_SHARE_OPTION
Allows an application to manage the pasteable range of the pasteboard data.
Permission level: system_basic
Authorization mode: system_grant
Enable via ACL: true
Valid since: 14
ohos.permission.ACCESS_APP_INSTALL_DIR
Allows a system application to access the application installation directory.
Permission level: system_core
Authorization mode: system_grant
Enable via ACL: true
Valid since: 14
ohos.permission.kernel.ALLOW_EXECUTABLE_FORT_MEMORY
Allows an application to have its system JS engine to apply for anonymous executable memory with the MAP_FORT identifier.
After the application has this permission, the system JS engine can request anonymous executable memory with MAP_FORT for just-in-time (JIT) compilation, which increase the runtime execution efficiency.
Permission level: system_basic
Authorization mode: system_grant
Valid since: 14
system_grant Permissions (Unavailable via ACL)
The following lists the system_grant permissions that cannot be requested via the ACL.
For details about the process for requesting permissions, see Workflow for Requesting Permissions.
ohos.permission.RECEIVER_STARTUP_COMPLETED
Allows an application to subscribe to the startup broadcast.
Permission level: system_basic
Authorization mode: system_grant
Enable via ACL: false
Valid since: 9
ohos.permission.SYSTEM_LIGHT_CONTROL
Allows an application to control lights, including turning on and off lights.
Permission level: system_basic
Authorization mode: system_grant
Enable via ACL: false
Valid since: 11
ohos.permission.QUERY_ACCESSIBILITY_ELEMENT
Allows an application to query accessibility elements in batches.
Permission level: system_basic
Authorization mode: system_grant
Enable via ACL: false
Valid since: 11
ohos.permission.GET_ALL_APP_ACCOUNTS
Allows an application to obtain information about all application accounts.
Permission level: system_core
Authorization mode: system_grant
Enable via ACL: false
Valid since: 7
ohos.permission.MANAGE_DEVICE_AUTH_CRED
Allows an application to call interfaces of the DeviceAuthCredMgr application.
Permission level: system_basic
Authorization mode: system_grant
Enable via ACL: false
Valid since: 10
ohos.permission.ACCESS_AUTH_RESPOOL
Allows an SA to register the executor.
Permission level: system_core
Authorization mode: system_grant
Enable via ACL: false
Valid since: 9
ohos.permission.READ_ACCESSIBILITY_CONFIG
Allows an application to read the accessibility configuration.
Permission level: system_basic
Authorization mode: system_grant
Enable via ACL: false
Valid since: 9
ohos.permission.WRITE_APP_PUSH_DATA
Allows the push service to write data to an application.
Permission level: system_basic
Authorization mode: system_grant
Enable via ACL: false
Valid since: 10
ohos.permission.READ_APP_PUSH_DATA
Allows the push service to read data from an application.
Permission level: system_basic
Authorization mode: system_grant
Enable via ACL: false
Valid since: 10
ohos.permission.NETSYS_INTERNAL
Allows an SA to call the network diagnosis, Wi-Fi, network adapter listening, and iptables setting APIs of netsys.
Permission level: system_basic
Authorization mode: system_grant
Enable via ACL: false
Valid since: 10
ohos.permission.DISTRIBUTED_SOFTBUS_CENTER
Allows networking between different devices.
Permission level: system_basic
Authorization mode: system_grant
Enable via ACL: false
Valid since: 9
ohos.permission.GET_NETWORK_STATS
Allows a system application to obtain historical network traffic.
Permission level: system_basic
Authorization mode: system_grant
Enable via ACL: false in API versions 10 to 11; true in API version 12 and later
Valid since: 10
ohos.permission.RESTRICT_APPLICATION_ACTIVE
Allows a standby component to publish a customized network limit event.
Permission level: system_basic
Authorization mode: system_grant
Enable via ACL: false
Valid since: 10
ohos.permission.CONNECT_CELLULAR_CALL_SERVICE
Allows a system service to access the cellular call SA.
Permission level: system_basic
Authorization mode: system_grant
Enable via ACL: false
Valid since: 10
ohos.permission.CONNECT_IMS_SERVICE
Allows a system service to access the IMS SA.
Permission level: system_basic
Authorization mode: system_grant
Enable via ACL: false
Valid since: 10
ohos.permission.ENFORCE_USER_IDM
Allows an SA to delete the IAM user information without a token.
Permission level: system_core
Authorization mode: system_grant
Enable via ACL: false
Valid since: 9
ohos.permission.WRITE_ACCESSIBILITY_CONFIG
Allows an application to set the accessibility configuration.
Permission level: system_basic
Authorization mode: system_grant
Enable via ACL: false
Valid since: 9
ohos.permission.ENABLE_DISTRIBUTED_HARDWARE
Allows a system service to enable distributed hardware resources.
Permission level: system_basic
Authorization mode: system_grant
Enable via ACL: false
Valid since: 11
ohos.permission.ACCESS_SUPER_HUB
Allows an application to access Super Hub.
Permission level: system_basic
Authorization mode: system_grant
Enable via ACL: false
Valid since: 12
ohos.permission.CALLED_UIEXTENSION_ON_LOCK_SCREEN
Allows a UIExtensionAbility to be displayed on the locked screen.
Permission level: system_core
Authorization mode: system_grant
Enable via ACL: false
Valid since: 14
user_grant Permissions (Available via ACL)
The following lists the user_grant permissions that can be requested via the ACL.
For details about the process for requesting permissions, see Workflow for Requesting Permissions.
ohos.permission.READ_AUDIO
Allows an application to access the audio files in a user directory.
Permission level: system_basic
Authorization mode: user_grant
Enable via ACL: true
Valid since: 9
ohos.permission.READ_DOCUMENT
Allows an application to access the documents in a user directory.
Permission level: system_basic
Authorization mode: user_grant
Enable via ACL: true
Valid since: 9
Deprecated from: 12
Alternative solution:
See the alternative solution of the Files permission group.
ohos.permission.READ_IMAGEVIDEO
Allows an application to access the images/videos in a user directory.
Permission level: system_basic
Authorization mode: user_grant
Enable via ACL: true
Valid since: 9
ohos.permission.WRITE_AUDIO
Allows an application to modify the audio files in a user directory.
Permission level: system_basic
Authorization mode: user_grant
Enable via ACL: true
Valid since: 9
ohos.permission.WRITE_DOCUMENT
Allows an application to modify the documents in a user directory.
Permission level: system_basic
Authorization mode: user_grant
Enable via ACL: true
Valid since: 9
Deprecated from: 12
Alternative solution:
See the alternative solution of the Files permission group.
ohos.permission.WRITE_IMAGEVIDEO
Allows an application to modify the images/videos in a user directory.
Permission level: system_basic
Authorization mode: user_grant
Enable via ACL: true
Valid since: 9
ohos.permission.READ_CONTACTS
Allows an application to read Contacts.
Permission level: system_basic
Authorization mode: user_grant
Enable via ACL: true
Valid since: 8
ohos.permission.WRITE_CONTACTS
Allows an application to add, remove, and modify Contacts.
Permission level: system_basic
Authorization mode: user_grant
Enable via ACL: true
Valid since: 8
ohos.permission.READ_WHOLE_CALENDAR
Allows an application to read all calendar information.
Permission level: system_basic
Authorization mode: user_grant
Enable via ACL: true
Valid since: 9
ohos.permission.WRITE_WHOLE_CALENDAR
Allows an application to add, remove, or edit calendar events.
Permission level: system_basic
Authorization mode: user_grant
Enable via ACL: true
Valid since: 9
ohos.permission.GET_INSTALLED_BUNDLE_LIST
Allows an application to obtain the list of installed applications.
Permission level: system_basic
Authorization mode: user_grant
Enable via ACL: true
Valid since: 10
ohos.permission.ANSWER_CALL
Allows an application to answer incoming calls.
Permission level: system_basic
Authorization mode: user_grant
Enable via ACL: true
Valid since: 9
ohos.permission.MANAGE_VOICEMAIL
Allows an application to access messages in the voice mailbox.
Permission level: system_basic
Authorization mode: user_grant
Enable via ACL: true
Valid since: 8
ohos.permission.READ_CALL_LOG
Allows an application to read call logs.
Permission level: system_basic
Authorization mode: user_grant
Enable via ACL: true
Valid since: 8
ohos.permission.READ_CELL_MESSAGES
Allows an application to read cell broadcast messages received by the device.
Permission level: system_basic
Authorization mode: user_grant
Enable via ACL: true
Valid since: 8
ohos.permission.READ_MESSAGES
Allows an application to read messages.
Permission level: system_basic
Authorization mode: user_grant
Enable via ACL: true
Valid since: 8
ohos.permission.RECEIVE_MMS
Allows an application to receive and process MMS messages.
Permission level: system_basic
Authorization mode: user_grant
Enable via ACL: true
Valid since: 8
ohos.permission.RECEIVE_SMS
Allows an application to receive and process SMS messages.
Permission level: system_basic
Authorization mode: user_grant
Enable via ACL: true
Valid since: 8
ohos.permission.RECEIVE_WAP_MESSAGES
Allows an application to receive and process WAP messages.
Permission level: system_basic
Authorization mode: user_grant
Enable via ACL: true
Valid since: 8
ohos.permission.SEND_MESSAGES
Allows an application to send messages.
Permission level: system_basic
Authorization mode: user_grant
Enable via ACL: true
Valid since: 8
ohos.permission.WRITE_CALL_LOG
Allows an application to add, remove, and edit call logs.
Permission level: system_basic
Authorization mode: user_grant
Enable via ACL: true
Valid since: 8
ohos.permission.READ_PASTEBOARD
Allows an application to read Pasteboard data.
Permission level: system_basic
Authorization mode: user_grant
Enable via ACL: true
Valid since: 11
ohos.permission.READ_WRITE_DESKTOP_DIRECTORY
Allows an application to access the Desktop directory and its subdirectories in the user directory.
Currently, this permission is available only to 2-in-1 device applications.
Permission level: system_basic
Authorization mode: user_grant
Enable via ACL: true
Valid since: 11
ohos.permission.SHORT_TERM_WRITE_IMAGEVIDEO
Allows an application to save images and videos to the user's directory within up to 30 minutes after obtaining the permission.
Permission level: system_basic
Authorization mode: user_grant
Enable via ACL: true
Valid since: 12
ohos.permission.CUSTOM_SCREEN_CAPTURE
Allows an application to capture screen information.
With this permission, the application can perform operations such as taking screenshots and recording on-screen information. Currently, this permission is available only to applications running on tablets and 2-in-1 devices.
Permission level: system_basic
Authorization mode: user_grant
Enable via ACL: true
Valid since: 14