SOTI Pulse Logo

Lockdown and MobiControl app permissions

MC
Melvin Cornelissen
coolblue

Good morning all! 

I have a question in regard to the application permissions for MobiControl. Whenever in Device Owner mode wouldn't Soti be able to grant the needed permissions without any user interaction? 

We're currently up against the fact that we're deploying a lockdown profile to the devices upon enrollment. Whenever the device is enrolled and the profile is set before anyone grants permissions manually the user won't be able to grant the permissions after the lockdown kicks in place. 

The user does get the notification that there's a user action pending and after clicking the notification it show the MobiControl page where you can navigate to the setting required but that step is blocked due to the lockdown being active. 

I find it strange that even in device owner mode and enrolled using Samsung Knox/Android Zero touch the user needs to grant those permissions. 

We've currently scoped down to just system setting permissions but we'd like to leverage all permissions for the MobiControl app but user actions are definitely blocking us from that. 

mobicontrol lockdown permissions
4 years ago
Android
ANSWERS
J
JCMOD@SOTI
4 years ago

Hi Melvin,

Thank you for posting in SOTI Central.

Regarding the initial problem with being unable to grant the permissions while the lockdown profile is deployed. I suggest you change the lockdown type to “Activity Suppression” and observe the behavior. On top of that, regarding the requirement of granting the permissions manually. That is set by the OEM themselves, some OEMs will require it and others will grant it automatically.

On top of the above, we introduced a feature in v15 where you can prompt the end-device to grant a selection of 4 permissions upon enrollment. See the source I’ve added below and search for “Android Plus”. Here is also a reference screenshot for you:

Sources: https://docs.soti.net/soti-mobicontrol/release-notes/?RN=2494#granular2494

If this resolves your query, please mark this post as the solution. Also, feel free to reach out if you need any clarification or have any questions.

Regards,

MC
Melvin Cornelissen
4 years ago

Thanks for the response. We do request the permissions at the enrollment stage but if the end user isn't fast enough to grant the permissions the lockdown profile gets delivered to the device and they won't be able to grant them any longer. 

Is there a way to postpone the lockdown profile until these permissions have been granted?

J
JCMOD@SOTI
4 years ago

Hi Melvin,

In the lockdown's profile, if you change the lockdown type from Native to Activity Suppression. Does that help with the issue you're facing?

Regards,

MC
Melvin Cornelissen
4 years ago

Unfortunately that does not solve the issue. We are able to get into the Mobicontrol request page but whenever we move to the actual settings page it redirects immediately to the lockdown. This goes for single app as for lockdown pages both. 

Similar Discussions