MDM-Exclusive Permissions
Note:
Currently in the beta phase.
The following permissions are exclusively available for MDM (Mobile Device Management) applications.
Note:
The following permissions do not support automatic signing. Therefore, during both debugging and release phases, you must follow the steps outlined in Manual Signing to complete manual signing.
ohos.permission.ENTERPRISE_GET_DEVICE_INFO
Allows an application to activate device management applications.
Permission Level: system_basic
Grant Mode: system_grant
ACL Enabled: true
Initial Version: 12
ohos.permission.ENTERPRISE_GET_NETWORK_INFO
Allows device management applications to query network information.
Permission Level: system_basic
Grant Mode: system_grant
ACL Enabled: true
Initial Version: 12
ohos.permission.ENTERPRISE_INSTALL_BUNDLE
Allows device management applications to install and uninstall packages.
Permission Level: system_core
Grant Mode: system_grant
ACL Enabled: true
Initial Version: 12
ohos.permission.ENTERPRISE_MANAGE_SET_APP_RUNNING_POLICY
Allows device management applications to set application runtime management policies.
Permission Level: system_basic
Grant Mode: system_grant
ACL Enabled: true
Initial Version: 12
ohos.permission.ENTERPRISE_RESET_DEVICE
Allows device management applications to restore devices to factory settings.
Permission Level: system_basic
Grant Mode: system_grant
ACL Enabled: true
Initial Version: 12
ohos.permission.ENTERPRISE_SET_ACCOUNT_POLICY
Allows device management applications to set account management policies.
Permission Level: system_basic
Grant Mode: system_grant
ACL Enabled: true
Initial Version: 12
ohos.permission.ENTERPRISE_SET_BUNDLE_INSTALL_POLICY
Allows device management applications to set package installation management policies.
Permission Level: system_basic
Grant Mode: system_grant
ACL Enabled: true
Initial Version: 12
ohos.permission.ENTERPRISE_SET_DATETIME
Allows device management applications to set system time.
Permission Level: system_basic
Grant Mode: system_grant
ACL Enabled: true
Initial Version: 12
ohos.permission.ENTERPRISE_SET_NETWORK
Allows device management applications to configure network information.
Permission Level: system_basic
Grant Mode: system_grant
ACL Enabled: true
Initial Version: 12
ohos.permission.ENTERPRISE_SET_WIFI
Allows device management applications to configure and query WiFi information.
Permission Level: system_basic
Grant Mode: system_grant
ACL Enabled: true
Initial Version: 12
ohos.permission.ENTERPRISE_SUBSCRIBE_MANAGED_EVENT
Allows device management applications to subscribe to management events.
Permission Level: system_basic
Grant Mode: system_grant
ACL Enabled: true
Initial Version: 12
ohos.permission.ENTERPRISE_RESTRICT_POLICY
Allows device administrators to issue and retrieve restriction policies.
Permission Level: system_basic
Grant Mode: system_grant
ACL Enabled: true
Initial Version: 12
ohos.permission.ENTERPRISE_SET_SCREENOFF_TIME
Allows device administrators to configure system sleep time.
Permission Level: system_basic
Grant Mode: system_grant
ACL Enabled: true
Initial Version: 12
ohos.permission.ENTERPRISE_MANAGE_USB
Allows device administrators to manage USB.
Permission Level: system_basic
Grant Mode: system_grant
ACL Enabled: true
Initial Version: 12
ohos.permission.ENTERPRISE_MANAGE_NETWORK
Allows device administrators to manage networks.
Permission Level: system_basic
Grant Mode: system_grant
ACL Enabled: true
Initial Version: 12
ohos.permission.ENTERPRISE_MANAGE_CERTIFICATE
Allows device administrators to manage certificates.
Permission Level: system_basic
Grant Mode: system_grant
ACL Enabled: true
Initial Version: 12
ohos.permission.ENTERPRISE_GET_SETTINGS
Allows device administrators to query data from the "Settings" application.
Permission Level: system_basic
Grant Mode: system_grant
ACL Enabled: true
Initial Version: 12
ohos.permission.INSTALL_ENTERPRISE_MDM_BUNDLE
Allows installation of enterprise MDM application packages on enterprise devices.
Permission Level: system_core
Grant Mode: system_grant
ACL Enabled: true
Initial Version: 12
ohos.permission.INSTALL_SELF_BUNDLE
Allows enterprise MDM applications to self-upgrade on enterprise devices.
Permission Level: system_core
Grant Mode: system_grant
ACL Enabled: true
Initial Version: 12
ohos.permission.ENTERPRISE_SET_BROWSER_POLICY
Allows devices to set/cancel browser policies.
Permission Level: system_basic
Grant Mode: system_grant
ACL Enabled: true
Initial Version: 12
ohos.permission.SET_ENTERPRISE_INFO
Allows device management applications to configure enterprise information.
Permission Level: system_basic
Grant Mode: system_grant
ACL Enabled: true
Initial Version: 12
ohos.permission.ENTERPRISE_MANAGE_SECURITY
Allows devices to configure security management policies.
Permission Level: system_basic
Grant Mode: system_grant
ACL Enabled: true
Initial Version: 12
ohos.permission.ENTERPRISE_MANAGE_BLUETOOTH
Allows device management applications to configure and query Bluetooth information.
Permission Level: system_basic
Grant Mode: system_grant
ACL Enabled: true
Initial Version: 12
ohos.permission.ENTERPRISE_MANAGE_SYSTEM
Allows devices to manage system configuration parameter policies.
Permission Level: system_basic
Grant Mode: system_grant
ACL Enabled: true
Initial Version: 12
ohos.permission.ENTERPRISE_MANAGE_WIFI
Allows device management applications to configure and query WIFI information.
Permission Level: system_basic
Grant Mode: system_grant
ACL Enabled: true
Initial Version: 12
ohos.permission.ENTERPRISE_MANAGE_RESTRICTIONS
Allows device management applications to manage restriction policies.
Permission Level: system_basic
Grant Mode: system_grant
ACL Enabled: true
Initial Version: 12
ohos.permission.ENTERPRISE_MANAGE_APPLICATION
Allows device management applications to manage application policies.
Permission Level: system_basic
Grant Mode: system_grant
ACL Enabled: true
Initial Version: 12
ohos.permission.ENTERPRISE_MANAGE_LOCATION
Allows device management applications to configure and query location information.
Permission Level: system_basic
Grant Mode: system_grant
ACL Enabled: true
Initial Version: 12
ohos.permission.ENTERPRISE_REBOOT
Allows device management applications to perform shutdown/reboot operations.
Permission Level: system_basic
Grant Mode: system_grant
ACL Enabled: true
Initial Version: 12
ohos.permission.ENTERPRISE_LOCK_DEVICE
Allows device management applications to lock devices.
Permission Level: system_basic
Grant Mode: system_grant
ACL Enabled: true
Initial Version: 12
ohos.permission.ENTERPRISE_MANAGE_SETTINGS
Allows device management applications to manage settings.
Permission Level: system_basic
Grant Mode: system_grant
ACL Enabled: true
Initial Version: 12## ohos.permission.ENTERPRISE_OPERATE_DEVICE
Allows device management applications to operate the device.
Permission Level: system_basic
Authorization Method: System grant (system_grant)
ACL Enabled: true
Initial Version: 12
ohos.permission.ENTERPRISE_ADMIN_MANAGE
Allows applications to manage device management applications.
Permission Level: system_basic
Authorization Method: System grant (system_grant)
ACL Enabled: true
Initial Version: 12
ohos.permission.ENTERPRISE_RECOVERY_KEY
Allows applications to manage enterprise recovery keys.
Permission Level: system_core
Authorization Method: System grant (system_grant)
ACL Enabled: true
Initial Version: 13
ohos.permission.ENTERPRISE_MANAGE_DELEGATED_POLICY
Allows device management applications to delegate other applications to set device control policies.
Permission Level: system_basic
Authorization Method: System grant (system_grant)
ACL Enabled: true
Initial Version: 14
ohos.permission.ENTERPRISE_GET_ALL_BUNDLE_INFO
Allows device management applications to obtain all application information on the device.
Permission Level: system_basic
Authorization Method: System grant (system_grant)
ACL Enabled: true
Supported Devices: Phone | PC/2in1 | Tablet
Initial Version: 20
ohos.permission.ENTERPRISE_SET_USER_RESTRICTION
Allows device management applications to restrict users from modifying system settings.
Permission Level: system_basic
Authorization Method: System grant (system_grant)
ACL Enabled: true
Supported Devices: Phone | PC/2in1 | Tablet
Initial Version: 20
ohos.permission.ENTERPRISE_MANAGE_APN
Allows device management applications to manage device APN policies.
Permission Level: system_basic
Authorization Method: System grant (system_grant)
ACL Enabled: true
Supported Devices: Phone | PC/2in1 | Tablet
Initial Version: 20
ohos.permission.ENTERPRISE_MANAGE_TELEPHONY
Allows device management applications to manage device call policies.
Permission Level: system_basic
Authorization Method: System grant (system_grant)
ACL Enabled: true
Supported Devices: Phone | PC/2in1 | Tablet
Initial Version: 20
ohos.permission.ENTERPRISE_SET_KIOSK
Allows device management applications to set Kiosk mode.
Permission Level: system_basic
Authorization Method: System grant (system_grant)
ACL Enabled: true
Supported Devices: Phone | PC/2in1 | Tablet
Initial Version: 20
ohos.permission.ENTERPRISE_SET_WALLPAPER
Allows device management applications to set wallpapers.
Permission Level: system_basic
Authorization Method: System grant (system_grant)
ACL Enabled: true
Supported Devices: Phone | PC/2in1 | Tablet
Initial Version: 20