Open system_grant Permissions
All the permissions in this topic are available to all applications and granted by the system.
After an application requests this type of permissions, the system automatically grants the permissions to the application when the application is installed.
NOTE Certificate-based authorization is not required for normal-level permissions.
Request Mode
The system_grant permissions are permissions authorized by the system. For details about how to request this type of permissions, see Declaring Permissions.
ohos.permission.USE_BLUETOOTH
Allows an application to access Bluetooth configurations,
including the Bluetooth name, Bluetooth device type, and switch status.
Permission level: normal
Authorization mode: system_grant
Valid since: 8
ohos.permission.GET_BUNDLE_INFO
Allows an application to obtain basic information about another application.
Permission level: normal
Authorization mode: system_grant
Valid since: 7
ohos.permission.PREPARE_APP_TERMINATE
Allows an application to perform customized actions before being terminated.
For example, the application can confirm with the user whether to terminate it through a pop-up window.
Permission level: normal
Authorization mode: system_grant
Valid since: 10
ohos.permission.PRINT
Allows an application to obtain the print framework capability.
Permission level: normal
Authorization mode: system_grant
Supported devices: phones | PCs/2-in-1 devices | tablets | TVs
Valid since: 10
ohos.permission.DISCOVER_BLUETOOTH
Allows an application to configure Bluetooth on a device, initiate or cancel a scan for Bluetooth devices, and pair with Bluetooth devices.
Permission level: normal
Authorization mode: system_grant
Valid since: 8
ohos.permission.ACCELEROMETER
Allows an application to read data from an acceleration sensor.
Acceleration sensors include normal, uncalibrated, and linear acceleration sensors.
Permission level: normal
Authorization mode: system_grant
Supported devices: phone | PCs/2-in-1 devices | tablets | TV | wearable
Valid since: 7
ohos.permission.ACCESS_BIOMETRIC
Allows an application to use biometric recognition for identity authentication.
This permission allows the following operations: check the biometric recognition capability of the device, customize the authentication dialog box, start biometric recognition, and obtain biometric recognition prompts.
Permission level: normal
Authorization mode: system_grant
Valid since: 6
ohos.permission.ACCESS_NOTIFICATION_POLICY
Allows an application to access the notification policy on the device.
This permission is required only when the ringtone needs to be changed from mute to unmute.
Permission level: normal
Authorization mode: system_grant
Valid since: 7
ohos.permission.GET_NETWORK_INFO
Allows an application to obtain network information.
Permission level: normal
Authorization mode: system_grant
Valid since: 8
ohos.permission.SET_NETWORK_INFO
Allows an application to set data network information.
With this permission, the application can activate or deactivate a network, and obtain and listen for network information.
Permission level: normal
Authorization mode: system_grant
Valid since: 8
ohos.permission.GET_WIFI_INFO
Allows an application to obtain Wi-Fi information and use the Wi-Fi P2P capability.
With this permission, the application can obtain Wi-Fi information, including the Wi-Fi on/off state, scan results, connection information, connection state, device capability, and P2P state. In addition, the application can use the P2P capability.
Permission level: normal
Authorization mode: system_grant
Valid since: 8
ohos.permission.GYROSCOPE
Allows an application to read data from a gyroscope sensor.
Gyroscope sensors include normal and uncalibrated gyroscope sensors.
Permission level: normal
Authorization mode: system_grant
Supported devices: phone | PCs/2-in-1 devices | tablets | TV | wearable
Valid since: 7
ohos.permission.INTERNET
Allows an application to access the Internet.
With this permission, an application can obtain IP addresses, perform DNS resolution, or customize DNS rules.
Permission level: normal
Authorization mode: system_grant
Valid since: 9
ohos.permission.KEEP_BACKGROUND_RUNNING
Allows a Service ability to keep running in the background.
Permission level: normal
Authorization mode: system_grant
Valid since: 8
ohos.permission.NFC_CARD_EMULATION
Allows an application to implement card emulation.
With this permission, the application can register the card emulation service and perform card emulation transactions.
Permission level: normal
Authorization mode: system_grant
Valid since: 8
ohos.permission.NFC_TAG
Allows an application to read and write NFC tags.
With this permission, the application can receive a tag, and read data from and write data to a tag.
Permission level: normal
Authorization mode: system_grant
Valid since: 7
ohos.permission.PRIVACY_WINDOW
Allows an application to set screens that cannot be captured or recorded.
Permission level: normal
Authorization mode: system_grant
Valid since: 9
Changelog: The permission level is system_basic in API versions 9 to 10 and changed to normal since API version 11.
ohos.permission.PUBLISH_AGENT_REMINDER
Allows an application to use agent-powered reminders.
Permission level: normal
Authorization mode: system_grant
Valid since: 7
ohos.permission.SET_WIFI_INFO
Allows an application to set a Wi-Fi device,
including scanning, enabling/disabling, connecting, and disabling Wi-Fi, modifying Wi-Fi settings, and using Wi-Fi P2P capabilities.
Permission level: normal
Authorization mode: system_grant
Valid since: 8
ohos.permission.VIBRATE
Allows an application to control vibration.
Vibration includes one-time vibration, preset vibration, or custom vibration.
Permission level: normal
Authorization mode: system_grant
Supported devices: phone | PCs/2-in-1 devices | tablets | TV | wearable
Valid since: 7
ohos.permission.CLEAN_BACKGROUND_PROCESSES
Allows an application to clear background processes based on their bundle names.
With this permission, the application can detect associated background tasks based on the bundle names and selectively terminate these tasks to release system resources or optimize performance.
Permission level: normal
Authorization mode: system_grant
Valid since: 7
ohos.permission.COMMONEVENT_STICKY
Allows an application to publish sticky common events.
With this permission, the application can publish sticky common events, so that subscribers can receive common events that have been sent before subscription.
Permission level: normal
Authorization mode: system_grant
Valid since: 7
ohos.permission.ACCESS_CERT_MANAGER
Allows an application to query certificates and private credentials.
Permission level: normal
Authorization mode: system_grant
Valid since: 9
ohos.permission.RUN_DYN_CODE
Allows an application to run dynamically delivered ArkCompiler bytecode when the ArkCompiler runtime engine is in restricted mode.
The APIs related to this permission are system APIs, and this permission is available only to specific system applications.
Permission level: normal
Authorization mode: system_grant
Valid since: 11
ohos.permission.READ_CLOUD_SYNC_CONFIG
Allows an application that has accessed the cloud to obtain its device-cloud synchronization configuration.
Permission level: normal
Authorization mode: system_grant
Supported devices: phones | TVs | wearables | PCs/2-in-1 devices | tablets | cars | lite wearables | smart locks
Valid since: 11
ohos.permission.STORE_PERSISTENT_DATA
Allows an application to store persistent data. The persistent data will be cleared only when the device's factory settings are restored or the system is reinstalled.
Permission level: normal
Authorization mode: system_grant
Valid since: 11
ohos.permission.ACCESS_EXTENSIONAL_DEVICE_DRIVER
Allows an application to use enhanced functions of the devices connected to this device.
Permission level: normal
Authorization mode: system_grant
Valid since: 11
ohos.permission.READ_ACCOUNT_LOGIN_STATE
Allows an application to read the login status of user accounts.
Permission level: normal
Authorization mode: system_grant
Valid since: 12
ohos.permission.ACCESS_SERVICE_NAVIGATION_INFO
Allows an application to access the navigation service.
With this permission, the application can set navigation information and process navigation instructions sent from other applications
Permission level: normal
Authorization mode: system_grant
Supported devices: phones | tablets | cars
Valid since: 12
ohos.permission.PROTECT_SCREEN_LOCK_DATA
Allows an application to protect its sensitive data from being accessed after the screen is locked.
After the application obtains this permission, a directory in /el5 will be automatically created. Access to the data in this directory is denied after the screen is locked.
Permission level: normal
Authorization mode: system_grant
Valid since: 12
ohos.permission.ACCESS_CAR_DISTRIBUTED_ENGINE
Allows an application to access the distributed travel service engine.
With this permission, the application can obtain the connection information between a phone and a head unit, such as the connection status and display ID.
Permission level: normal
Authorization mode: system_grant
Supported devices: phones | tablets | cars
Valid since: 12
ohos.permission.WINDOW_TOPMOST
Allows an application to set pinned windows.
Permission level: normal
Authorization mode: system_grant
Supported devices: PCs/2-in-1 devices
Valid since: 13
ohos.permission.MANAGE_INPUT_INFRARED_EMITTER
Allows an application to use infrared interfaces.
With this permission, the application can obtain the maximum frequency supported by the infrared module and send infrared signals at a specific frequency.
Permission level: normal
Authorization mode: system_grant
Valid since: 12
Changelog: This permission is available to system applications in API versions 12 to 15, and available to normal applications since API version 16.
ohos.permission.INPUT_KEYBOARD_CONTROLLER
Allows an application to set the status of keyboard function keys.
With this permission, the application can turn on or off the function keys, such as CapsLock. This permission is available only to input method applications.
Permission level: normal
Authorization mode: system_grant
Valid since: 15
ohos.permission.SET_ABILITY_INSTANCE_INFO
Allows an application to set the icon and label information for each ability.
The configured icon and label information can be displayed in Task Center and the shortcut bar.
Permission level: normal
Authorization mode: system_grant
Valid since: 15
ohos.permission.NDK_START_SELF_UI_ABILITY
Allows an application to start its UIAbility by using C APIs.
Currently, this permission is available only to 2-in-1 device applications.
Permission level: normal
Authorization mode: system_grant
Valid since: 15
ohos.permission.GET_FILE_ICON
Allows an application to obtain the icon of the specified file type.
With this permission, the application can obtain the icon of the specified file type.
Permission level: normal
Authorization mode: system_grant
Valid since: 17
ohos.permission.DETECT_GESTURE
Allows an application to detect gestures.
With this permission, the application can detect information such as the user's holding posture and operating hand.
Permission level: normal
Authorization mode: system_grant
Supported devices: general devices
Valid since: 20
ohos.permission.kernel.NET_RAW
Allows an application to capture network data packets.
With this permission, the application can capture network data packets only after being authenticated by the user.
Permission level: normal
Authorization mode: system_grant
Supported devices: PCs/2-in-1 devices
Valid since: 20
ohos.permission.kernel.DEBUGGER
Allows an application to obtain the debugging capability.
With this permission, the application can have the ptrace debugging capability as the main process.
Permission level: normal
Authorization mode: system_grant
Supported devices: PCs/2-in-1 devices
Valid since: 20
ohos.permission.kernel.ALLOW_DEBUG
Allows a C/C++ program to be debugged.
With this permission, the C/C++ program in the application can be debugged. However, the runtime memory may be dumped. Exercise caution when using this permission.
Permission level: normal
Authorization mode: system_grant
Supported devices: PCs/2-in-1 devices
Valid since: 20
ohos.permission.BACKGROUND_MANAGER_POWER_SAVE_MODE
Allows an application to set the power saving mode for its own processes.
This permission can be requested when the application meets the following conditions:
- The application is not focused, and there are no audio operations or UI updates.
- The application cannot obtain the power lock through the system framework.
- The application needs to perform time-consuming computing tasks, such as compression, decompression, and compilation, which are significantly restricted by CPU resources. (In this case, the power saving mode will be enabled forcibly.)
Permission level: normal
Authorization mode: system_grant
Supported devices: PCs/2-in-1 devices
Valid since: 20
ohos.permission.SET_WINDOW_TRANSPARENT
Allows an application to set the main window container to be transparent and remove the shadow of the outer border of the main window.
With this permission, the application can set the background color and the shadow visibility of the main window.
Permission level: normal
Authorization mode: system_grant
Supported devices: PCs/2-in-1 devices | tablets
Valid since: 20
Changelog: This permission is available only on PCs/2-in-1 devices from API versions 20 to 22. Since API version 23, this permission is also available on tablets.
ohos.permission.START_WINDOW_BELOW_LOCK_SCREEN
Allows an application to start in the locked screen state.
With this permission, the application can be started when the screen is locked. After the device is unlocked, the application launch screen is displayed.
Permission level: normal
Authorization mode: system_grant
Supported devices: PCs/2-in-1 devices
Since: 21
ohos.permission.kernel.IGNORE_LIBRARY_VALIDATION
Allows an independent binary program to load independent binary .so files with different owner IDs.
This permission applies only to independent binary programs, not to HAPs.
Permission level: normal
Authorization mode: system_grant
Supported devices: PCs/2-in-1 devices
Valid since: 20
ohos.permission.TIMEOUT_SCREENOFF_DISABLE_LOCK
Allows an application to turn off the screen but keep it unlocked after a timeout.
The device locks by default when the screen turns off after a timeout. With this permission, the application does not enter the lock screen when the screen turns off after a timeout.
Permission level: normal
Authorization mode: system_grant
Supported devices: PCs/2-in-1 devices
Since: 22
ohos.permission.LOCK_WINDOW_CURSOR
Allows an application to lock the mouse cursor when the window gains focus.
With this permission, the application can lock the mouse cursor within the window when focused, preventing it from moving outside. It also controls if the cursor moves with the window and releases the cursor when the window loses focus.
Permission level: normal
Authorization mode: system_grant
Supported devices: general devices
Since: 22
ohos.permission.CUSTOMIZE_MENU_ICON
Allows an application to customize icons in the shortcut menu of Files.
With this permission, the application can customize its icon in the shortcut menu of Files, helping users recognize and start it easily.
Permission level: normal
Authorization mode: system_grant
Supported devices: PCs/2-in-1 devices | tablets
Since: 23
ohos.permission.kernel.EXEMPT_ANONYMOUS_EXECUTABLE_MEMORY
Allows a program to declare anonymous executable memory.
This permission applies only to binary programs.
Permission level: normal
Authorization mode: system_grant
Supported devices: PCs/2-in-1 devices
Since: 23
ohos.permission.INHERIT_PARENT_PERMISSION
Allows a child process to inherit the permissions of its parent process.
This permission applies only to binary programs.
Permission level: normal
Authorization mode: system_grant
Supported devices: PCs/2-in-1 devices
Since: 23
ohos.permission.GET_DONOTDISTURB_STATE
Allows an application to obtain the Do Not Disturb state of the system.
With this permission, the application can query whether the system is in the Do Not Disturb state via an API call.
Permission level: normal
Authorization mode: system_grant
Supported devices: phones | tablets
Since: 23
ohos.permission.ALLOW_COREDUMP
Allows the system to dump the memory of an application process to the application sandbox.
With this permission, the application allows the system to dump application memory to the sandbox.
Permission level: normal
Authorization mode: system_grant
Supported devices: 2-in-1 devices
Since: 23
ohos.permission.HDR_BRIGHTNESS
Allows an application to use the HDR brightening capability.
With this permission, the application can apply HDR brightening effects to component content.
Permission level: normal
Authorization mode: system_grant
Supported devices: general devices
Since: 24
ohos.permission.CONNECT_OBJECTEDITOR_EXTENSION
Allows an application to query information about and launch ObjectEditorExtensionAbility components.
With this permission, the application can query available types of pluggable embedded content and edit the corresponding content.
Permission level: normal
Authorization mode: system_grant
Supported devices: PCs/2-in-1 devices | phones | tablets
Since: 24
ohos.permission.QUERY_VOLUME_ENCRYPTION_STATUS
Allows an application to query the encryption and decryption status of a volume.
With this permission, the application can obtain the encryption and decryption status of a volume and subscribe to system public events related to changes in the encryption and decryption status of a volume.
Permission level: normal
Authorization mode: system_grant
Supported devices: PCs/2-in-1 devices
Since: 26.0.0
ohos.permission.STYLUS_FRAME_BOOST
Allows an application to use stylus responsiveness enhancement APIs.
With this permission, the application can improve handwriting performance, ensuring a more responsive stylus experience while writing.
Permission level: normal
Authorization mode: system_grant
Supported devices: phones | PCs/2-in-1 devices | tablets
Since: 26.0.0
ohos.permission.GET_ENTERPRISE_CONFIG
Allows an application to obtain custom enterprise device management (EDM) configuration files.
With this permission, the application can obtain custom EDM configuration files, including those for wallpapers and browser policies.
Permission level: normal
Authorization mode: system_grant
Supported devices: phones | PCs/2-in-1 devices | tablets
Since: 20
ohos.permission.ACCESS_CAR_AUDIO
Allows an application to access and manage in-vehicle audio.
With this permission, the application can set audio sound effects and manage audio zones.
Permission level: normal
Authorization mode: system_grant
Supported devices: cars
Since: 26.0.0