Hi Dahin,

Thanks for the post!

Please try sending the below legacy script to the android devices(Android Agent Implemented 13.6.0.1645) to have the Notification Access and grant those permissions:
request_appops_permission BIND_NOTIFICATION_LISTENER_SERVICE

This permission can usually be found via this path: Settings -> Apps & notifications -> Special app access -> Notification access. The path may vary from device to device.

Please share the outcome if this script works for you.

Regards,

Thanks for replying!

How would a line in the above posted script look?

Like this?

request_appops_permission android.permission.BIND_NOTIFICATION_LISTENER_SERVICE

Hello Dahin,

Above mentioned script worked for you? if not, can you please try below script -

request_appops_permission BIND_NOTIFICATION_LISTENER_SERVICE
restartagent

Regards,

I have added you lines to the top of my script, so it now looks as follows:

request_appops_permission BIND_NOTIFICATION_LISTENER_SERVICE
restartagent
afw_set_permission_grant_state com.ignitix.systemone net.soti.mobicontrol.permission.DEVICE_INFO allow
afw_set_permission_grant_state com.ignitix.systemone net.soti.mobicontrol.permission.DEVICE_INFO_ELM allow
afw_set_permission_grant_state com.ignitix.systemone net.soti.mobicontrol.permission.DEVICE_INFO_AFW allow
afw_set_permission_grant_state com.ignitix.systemone net.soti.mobicontrol.permission.GET_DATA allow
afw_set_permission_grant_state com.ignitix.systemone net.soti.mobicontrol.permission.GET_DATA_ELM allow
afw_set_permission_grant_state com.ignitix.systemone net.soti.mobicontrol.permission.GET_DATA_AFW allow
;afw_set_permission_grant_state com.ignitix.systemone android.permission.CAMERA allow
;afw_set_permission_grant_state com.ignitix.systemone android.permission.RECORD_AUDIO allow
;afw_set_permission_grant_state com.ignitix.systemone android.permission.WRITE_EXTERNAL_STORAGE allow
;afw_set_permission_grant_state com.ignitix.systemone android.permission.READ_EXTERNAL_STORAGE allow
;afw_set_permission_grant_state com.ignitix.systemone android.permission.CALL_PHONE allow
;afw_set_permission_grant_state com.ignitix.systemone android.permission.ACCESS_COURSE_LOCATION allow
;afw_set_permission_grant_state com.ignitix.systemone android.permission.ACCESS_FINE_LOCATION allow
;afw_set_permission_grant_state com.ignitix.systemone android.permission.RECEIVE_SMS allow
;afw_set_permission_grant_state com.ignitix.systemone android.permission.SEND_SMS allow
;afw_set_permission_grant_state com.ignitix.systemone android.permission.WRITE_SETTINGS allow
;afw_set_permission_grant_state com.ignitix.systemone android.permission.VIBRATE allow
;afw_set_permission_grant_state com.ignitix.systemone android.permission.WAKE_LOCK allow
afw_set_permission_grant_state com.ignitix.systemone android.permission.ACCESS_WIFI_STATE allow
afw_set_permission_grant_state com.ignitix.systemone android.permission.ACCESS_NETWORK_STATE allow
afw_set_permission_grant_state com.ignitix.systemone android.permission.ACCESS_FINE_LOCATION allow
afw_set_permission_grant_state com.ignitix.systemone android.permission.ACCESS_COARSE_LOCATION allow
afw_set_permission_grant_state com.ignitix.systemone android.permission.BLUETOOTH allow
afw_set_permission_grant_state com.ignitix.systemone android.permission.BLUETOOTH_ADMIN allow
afw_set_permission_grant_state com.ignitix.systemone android.permission.CALL_PHONE allow
afw_set_permission_grant_state com.ignitix.systemone android.permission.CHANGE_WIFI_STATE allow
afw_set_permission_grant_state com.ignitix.systemone android.permission.FOREGROUND_SERVICE allow
afw_set_permission_grant_state com.ignitix.systemone android.permission.GET_ACCOUNTS allow
afw_set_permission_grant_state com.ignitix.systemone android.permission.INTERNET allow
afw_set_permission_grant_state com.ignitix.systemone android.permission.KILL_BACKGROUND_PROCESSES allow
afw_set_permission_grant_state com.ignitix.systemone android.permission.READ_PROFILE allow
afw_set_permission_grant_state com.ignitix.systemone android.permission.READ_CONTACTS allow
afw_set_permission_grant_state com.ignitix.systemone android.permission.READ_PHONE_STATE allow
afw_set_permission_grant_state com.ignitix.systemone android.permission.REQUEST_IGNORE_BATTERY_OPTIMIZATIONS allow
afw_set_permission_grant_state com.ignitix.systemone android.permission.REQUEST_INSTALL_PACKAGES allow
afw_set_permission_grant_state com.ignitix.systemone android.permission.RECEIVE_BOOT_COMPLETED allow
afw_set_permission_grant_state com.ignitix.systemone android.permission.VIBRATE allow
afw_set_permission_grant_state com.ignitix.systemone android.permission.WAKE_LOCK allow
afw_set_permission_grant_state com.ignitix.systemone android.permission.WRITE_SETTINGS allow
afw_set_permission_grant_state com.ignitix.systemone android.permission.WRITE_EXTERNAL_STORAGE allow
afw_set_permission_grant_state com.ignitix.systemone com.honeywell.provisioner.ACCESS allow
afw_set_permission_grant_state com.ignitix.systemone android.permission.NFC allow
afw_set_permission_grant_state com.ignitix.systemone android.permission.CAMERA allow
afw_set_permission_grant_state com.ignitix.systemone android.permission.RECORD_AUDIO allow
afw_set_permission_grant_state com.ignitix.systemone android.permission.FLASHLIGHT allow
afw_set_permission_grant_state com.ignitix.systemone com.android.settings/.Settings$AppWriteSettingsActivity allow
afw_set_permission_grant_state com.ignitix.systemone com.android.settings.Settings$AppWriteSettingsActivity allow
afw_set_permission_grant_state com.ignitix.systemone com.android.browser.permission.READ_HISTORY_BOOKMARKS allow
afw_set_permission_grant_state com.ignitix.systemone com.google.android.gms.permission.ACTIVITY_RECOGNITION allow
afw_prevent_uninstall com.ignitix.systemone enable
batteryoptimize allow com.ignitix.systemone

I also tried it without the "restartagent", but it didn't work. The permission popups still show up, unfortunately.

What are the version and build numbers of your device agent? And the active MDM API's reported by your device agent or in the device's information tab of your web console.

Have you manually granted any permission(s) for the device agent itself in your device's Settings?

Did you fail for some or all of the permissions specified in your scripts?   If some worked fine, what were they?

The agent installed on the device has the version number 13.6.0.1476, according to SOTI MobiControl.

APIs are the follwing: RC+, Enterprise 4.1

I have not manually configured anything on the devices. If we get a new device, we set it up using three QR-codes which tell the device to download the agent from our SFTP-server and install it - from then on SOTI rolls out the package. The only permissions I tinker with are the ones set in the post install script of the packages I build (= the ones seen above).

Most of the permissions (camera, microphone, phone calls, etc.) are working on Android 7.1.1 devices (only the changing of battery settings as well as the access to system settings have to be permitted manually). On my Android 8.1.0 test device, multiple permissions pop up (running in the background, camera, microphone, etc.).

Edit: Is there a way to hide a lockdown icon (e.g. if I enabled the settings "com.android.settings" in lockdown mode, but I dont want it to be visible, just to not get blocked if another app calls a settings function)?