SOTI Pulse Logo

Special Permission settings commands

Solved
MR
Matt Rosas

Looking to see if anyone else knows the other command strings for pulling up the "Special Permissions" for apps, in particular MobiControl, such as this one:

start activity com.android.settings/.Settings$OverlaySettingsActivity

This one in particular brings up the "Draw over other apps" Setting menu and we are using this assigned to a Launch:// button on the Dynamic Lockdown (which is set to Native). I am trying to write a script that will open the 5 permissions that MobiControl is requesting but can not automatically set - 

Draw Over Other Apps

Manage External Storage

Write Settings

Notification Access

Usage Stats

Currently when the notification from MobiControl comes up after the initial installation, sometimes pressing the MobiControl Notification will NOT bring you to the corresponding menu and the user will have to exit out of Lockdown then go to settings to manually change these. While its a shame that these permissions can not be set automatically I know it is a limitation Android has implemented. The end goal that we are trying to reach would be a single button that would bring up the settings menu one by one so the user can set them THEN change the Lockdown to one that does not have that button any longer.

Draw Over lockdown permissions Special Permissions
3 years ago
Android Scripting
ANSWERS
EG
Edgar Gomez
3 years ago

Hi Matt

You may add the following two hidden items in the lockdown, so the user can resolve the pending actions:

com.google.android.permissioncontroller

com.android.settings

BTW it would be very useful if Mobicontrol had and option for hidden items in lockdown (as other EMMs do). For now, you would have to manage that in the template.

Solution
MR
Matt Rosas
3 years ago

This is ultimately what I had to do to resolve the pending actions not opening the settings menu, a more dynamic lockdown/kiosk mode would be very helpful as we transitioning from maas360 to MobiControl and only showing installed applications/being able to hide specific applications is something that is offered out of the box from them. We can only hope for this to be included in the provided lockdown with MobiControl, till them i'll have to have multiple lockdowns I have to manage

7
74HCT04
3 years ago

I appreciate that this doesn't quite do what you want, but you may find this interesting/useful:

https://github.com/mobilebob/Soti_Dynamic_Template

Disclaimer: I have nothing to do with this code, nor have I tested it!

MR
Matt Rosas
3 years ago

To add some more information, We are using Samsung Galaxy Tab A devices running Android 11. They are running MobiControl version 15.2.0 Build 1025

RS
Rafael Schäfer
3 years ago

You could try following (i had not enough time here to test myself because only our Samsung devices have this issue (because they don't have a plugin) and they are getting less):

  1. Use a device with full acces (but till in Soti Mobicontrol managed and with the permission NOT granted but notification shown)
  2. disable the lockdownscreen/kiosk mode
  3. tap on first notification, so you will be provided to the settings menu where to enable it
  4. send script "identify_activity"
  5. look into the logs in the console and there you should get the settings path 
  6. copy it and paste it as a launch lockdown item
  7. Optional: remove this item in the template (i would put them on top), so the "button" is not shown in kiosk mode but just accessable via the notification
  8. Do this for every single notification
  9. Re-Enroll the device and check if it works

This should give you access to these settings but not been able to test until now but would be nice to read if this would help you even this is not a "single" button.

RC
Raymond Chan Diamond Contributor
3 years ago

Running Settings is often not allowed for many use cases using kiosk menu.  If it is so for your case, granting app permission only need to be done once only, and it might be simpler to just enroll your devices to a device group without kiosk menu enabled, and then have the required device agent app permission granted on the device screen without kiosk.  Upon completion, MobiControl device administrator can manually relocate each such device to the real production group with kiosk mode enabled.

Similar Discussions