What is your device brand and model?  What about the Android version and device agent version & build number?  I don't know why you get prompt for such permission on your device for using Kiosk mode.

If I haven't misunderstood your problem and guessed incorrectly about what's happening,  I think you could just go to Settings -> App Manager, select Mobicontrol device agent app, scroll to the bottom, and enable the permission "Apps that can appear on top"

Hi Ciaran,

This permission is needed for Lockdown because it allows MobiControl to control foreground applications and processes.
If the permission had not been previously granted, then you will receive this prompt.

Unfortunately, this permission needs to be granted manually and Raymond had provided one possible way above (the location may vary depending on your version of Android). As stated in a previous post, this is expected behaviour because user input is required for OS security reasons and there are no known scripts.

Regards,
~G

Thanks for this, Raymonds answer pointed me in the right direction.

To clarify - if you want to enable Kiosk mode you need to manually enable the MobiControl Agent, is this correct? It might be a good idea to document this somewhere, or maybe it already is?

Anyway, problem solved, thank you.

Even for two Samsung devices running Android 7.1.1 and 8.0, that have the stricter permission model implemented, I've just retested and confirmed that "Apps that can appear on top" permission is NOT mandatory for Android Plus Kiosk mode to work.  My previous tests for Android Enterprise platform done a few months ago also did not require such permission.  However,  as Android Enterprise platform is still evolving,  I can't rule out possibility that the mentioned permission must be granted to use Kiosk mode for a particular or all band/model. 

Would you mind sharing information about your device brand and model, Android firmware version, and device agent version & build number?

Hi Raymond,

I'm using the following:

Nokia 8

Device Kind Android Plus

OS Version 8.1.0

OEM Version 00WW_4_88B

Android API Level 27

Agent Version 13.5.0.1577

Remote Control Version 1.6.0.100

Hope this helps :)

Thanks for your information. 

As your device is running the latest Android version (8.1.x),  there can be some difference in behavior compared to earlier versions.    I can give your more updates when I get some 8.1.x devices from a few big brands for thorough testing.

I'm getting this error. Ideally we would like to enroll the phones at startup so I am not sure how to resolve this once the phones are in lockdown.