Granting Permissions Using OEMConfig for Zebra Devices

To ensure seamless SOTI MobiControl operation, specific permissions must be granted using OEMConfig. The method used depends on the Android OS version:

• Android 10 or below: Profile with Zebra OEM OR App Policy with Legacy OEMConfig.

• Android 11 or above: Only "Zebra OEMConfig Powered by MX" can be used via App Policy.

• Devices: Zebra Android Enterprise devices 

• Permissions: Required app-specific permissions for SOTI MobiControl operations.

• Reference Links:

  • Zebra Signature Extraction: Zebra Support.

Note:  The permission "Modify System Settings" is not available to be enabled automatically. The user must grant it manually. 

For Android 10 and Below – Profile-Based Approach

Step 1: Create a New Profile

1. Log in to the SOTI MobiControl web console.

2. Navigate to Profiles (Left Panel).

3. Select New Profile.

4. Select Android Enterprise.

5. Choose Work Managed Device / Managed Profile.

6. Select Next.

Step 2: Configure OEMConfig for Permissions

1. Under Configurations, select Add Configuration.

2. Select OEMConfig → Choose Zebra OEMConfig from the list.

3. Select Configure.

4. In the Permission Access Configuration section:

• Set Permission Access Action → Grant.
• Select Grant Permission → Choose required permission (e.g., Manage External Storage).
• Enter Grant Application Package → net.soti.mobicontrol.androidwork.
• Enter Grant Application Signature → Obtain from Zebra Support. or use:

"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"

5. Select Save.

Step 3: Deploy Profile to Devices

1. Select Save & Assign.

2. Select Device Groups or Specific Devices.

3. Se;ect Deploy.

4. Force Sync to apply changes.

For Android 11 and Above – App Policy-Based Approach

Step 1: Create or Edit an App Policy

1. Log in to the SOTI MobiControl web console.

2. Navigate to  Policies (Left Panel).

3. Select New App Policy OR select an existing policy.

4. Choose Android Enterprise.

5. Select Next.

Step 2: Enable Managed Configuration

1. Scroll down to App Policies.

2. Select Add Application.

3. Choose Zebra OEMConfig Powered by MX.

4. Select Enable Managed Configuration.

Step 3: Configure Package Permissions

1. Go to Package Configuration →select Add New Package.

2. Enter the following details:

• Class Name → Any name for the settings (e.g., ManageStorage_MobiControl).
• Package Name → net.soti.mobicontrol.androidwork.
• Package Signing Certificate → Use the following for SOTI MobiControl Google App or retrieve it for your specific application from Zebra Support.

"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"

3. Select Add.

4. Repeat for all required permissions.

Step 4: Deploy App Policy

1. Select Save & Assign.

2. Select Device Groups or Specific Devices.

3. Select Deploy.

4. Force Sync on the device.

• Confirm Deployment: Check if the profile/app policy has been applied correctly in the SOTI MobiControl console.

• Device Logs: Monitor logs to ensure the required permissions are granted.

• Device Settings: Check if the permissions are granted through device settings.

• Troubleshoot Issues:

  • Ensure the correct OEMConfig app is installed.

  • Ensure the profile is installed.

  • Verify certificate correctness using Zebra’s guide.