SOTI Pulse Logo

Application Permissions are blocked by Soti

Solved
J
Julian
PanStreet International GmbH

Hello Soti Team,

i have a problem with some of our devices (Zebra TC58/78 Android 11) regarding the application permissions. I am not able to change the permissions on the device and i dont know why. It is grayed out and saying "Action not allowed This action is disabled by SOTI MobiControl. Contact your organization's administrator to learn more."
I do not remember configuring anything in the profile what is causing the blocking. I also tried to revoke all profiles. But even then, it is still grayed out. I also tried to enable / disable the button "Allow app management" under "Feature control" ... still no luck.

(This is just an example, it is happening on more applications ... I am able to change the permissions of system apps like the camera)

I would like to change it to "Allow only while using the app".

Any suggestions? Thanks in advance.


Mobicontrol 15.6
Agent 2024.0.4.1056

a year ago
SOTI MobiControl
ANSWERS
J
Julian
a year ago

I have found a workaround:

The script "afw_set_permission_grant_state PACKAGE.ID android.permission.ACCESS_BACKGROUND_LOCATION deny" lets me change the permission to "allow only while using the app".

"afw_set_permission_grant_state PACKAGE.ID android.permission.ACCESS_FINE_LOCATION deny" doesnt allow location access to the app.

Solution
RS
Rafael Schäfer
a year ago

If you install apps via Mobicontrol, they normally get all requested permissions automatically and can't be changed even if in admin mode.

J
Julian
a year ago

Thanks for the answer, but is there not a workaround somehow? Because i have the same issue with applications that get installed through the Play Store. And i dont want to automatically grant access to the location on all applications all the time.

RC
Raymond Chan Diamond Contributor
a year ago

Have you checked if there is similar problem with earlier device agent on thee same device model?

J
Julian
a year ago

No unfortunately i dont know if its the same case with older agents.

SB
Simon Breuer
a year ago

You can use the following command to change this behaviour:

afw_set_permission_policy prompt|grant|deny|clear

Where

  • prompt prompts the device user for all permissions
  • grant automatically grants all permissions that an application requires
  • deny automatically denies all permissions that an application requires
  • clear resets the policy to the agent define default state

Using "prompt" allows the user to select the option "Allow only while using the app". I don't see any other possibility to force this option.

I think you will have to apply the script before the application is installed on the device (but I am not sure for 100%).

J
Julian
a year ago

Thanks for the answer, i tried that script before installing the application and after, but unfortunately it is still grayed out. Seems like only apps are affected that come through packages to the device.

V
VPMod@SOTI.net
a year ago

Hi Julian


Thanks for posting on SOTI Pulse.

Thank you, Rafael, Raymond, and Simon, for responding to the post, your expertise and willingness to help are greatly appreciated.

We are glad to know that your issue has been resolved. If you have any additional questions or concerns, please don't hesitate to reach out. We're dedicated to providing assistance and support.

Technical Support, SOTI Inc.

Similar Discussions