We are converting all of our zebra devices to SOTI from Intune (yay).  We have setup a lock screen and authentication.  During the install we keep getting requests for the user to allow MobiControl some permissions.  

Modify System Settings

Device & app notifications

In order to do this, the user would have to exit the lock screen, which would require the admin password, which sort of defeats the entire purpose of the lock screen.  Many of our warehouses do not have any local IT support so we are stuck enrolling devices only when a remote SOTI admin is handy.

There is a script command 'afw_set_permission_policy grant' which seems to work.  However it is always the last thing to be installed and only after someone has intervened and set the above permissions.

Is there a way around this?  Can the script be set someone to be the first thing installed, or another way to eliminate these permissions to be required?

Thanks.