Secure Apps Manager Android permissions

When the device user installs a version of the Secure Apps Manager prior to version 8.0, the device user is presented a list of permissions that the Secure Apps Manager requires. The device user then chooses whether or not to continue the installation.

Secure Apps Manager 8.0 through the most recently released version as supported by MobileIron behaves differently. Specifically, on devices running Android 6.0 through the most recently released version as supported by MobileIron, the device user is not presented a list of permissions when installing the Secure Apps Manager. Instead, the device user is asked to grant certain permissions when the Secure Apps Manager runs. The permissions are for accessing:

• SD card storage
• the camera
• the phone
• contacts

Note The Following:  

• On Android versions prior to Android 6.0, regardless of the Secure Apps Manager version, the device user is presented the list of permissions during installation.The device user then chooses whether or not to continue the installation.
• On Samsung devices, regardless of the Secure Apps Manager version, the device user is not presented with a list of permissions at any time (installation time or run-time). The Secure Apps Manager can access the capabilities without asking the device user for permission.

The following table provides more information about each permission request:

Table 1. Secure Apps Manager permission requests

Permission	Reason needed	Requested at these times	Behavior if not granted
Storage	To securely store AppConnect-related data on the SD card.	When the device user first launches the Secure Apps Manager	The device user cannot login to secure apps.
Camera	A secure app wants to access the camera.	When both of the following are true: • A secure app requests access to the camera • The device user has not yet granted access to the camera for secure apps.	The secure app cannot access the camera.
Phone	A secure app wants to access the phone.	When both of the following are true: • A secure app requests access to the phone. • The device user has not yet granted access to the phone for secure apps.	The secure app cannot access the phone.
Contacts	A secure app wants to access the device’s contacts.	When both of the following are true: • A secure app requests access to contacts. • The device user has not yet granted access to contacts for secure apps.	The secure app cannot access contacts.