File upload failed into Android/data folder

Solved

Good evening,

I'm looking for a solution in order to transfer files through a File Sync rule into this folder:

/sdcard/Android/data/it.dedagroup.stealth.movements/files/

Basically it is a configuration file that the app (it.dedagroup.stealth.movements) reads once it is launched.

During my preliminaty tests with the remote control I found out that I don't have the privileges to write into the data folder, see screenshot below:

I have the same result from both remote control options (plugin and web).

Will this impair the file transfer even with the File Sync rule? 

Is there any way to grant the writing permission to this folder?

Below some details:

SOTI MobiControl instance version: 15.6.0.1018

Agent version: 15.3.2.1042

Plugin version: 1.19.2.118

Enrollment type: Work Managed

Producer: Honeywell

Model: EDA52

Android version: 11

Thank you, best regards.

2 years ago
SOTI MobiControl
ANSWERS
MD
Matt Dermody
2 years ago

What you're trying to accomplish is impossible. Android 11 introduced restrictions on access to Scoped Storage directories under /sdcard/Android/data/... Individual apps still have read/write access to their own Scoped Storage directories but external applications are restricted from access. This includes even Android Enterprise device policy controllers like the SOTI agent including those with Device Owner privileges. It is very unfortunate that Device Owner DPCs weren't granted an elevated permission to access these directories on A11+. 

In response to this restriction, applications that previously leveraged scoped storage directories for configurations need to be modified in order to provide an alternate means of configuration as the usage of a scoped storage directory is no longer compatible with any EMM in A11+.  Some applications have migrated to other configuration directories like /sdcard/<appname> that can be accessed after the application requests the MANAGE_EXTERNAL_STORAGE permission. The SOTI agent can be granted the same privilege, allowing it to read and write from the same directory that the app uses for configuration. Other applications have migrated to using Managed Configurations, which can be distributed via Managed Google Play or even via an Enterprise App Policy in SOTI, without the reliance on the Play server infrastructure. Regardless of the approach, the app itself will require a code change in order to be compatible with external configuration from an EMM on Android 11 and higher. This is a problem affecting all EMMs, not just SOTI. 

https://discussions.soti.net/articles/impact-of-android-11-scoped-storage-restrictions-on-android-agent

Solution
GB
Giuseppe, Brando
2 years ago

Thank you Matt,

I remembered something similar, I just asked to be sure it was from Android 11+.

Best regards

7
74HCT04
2 years ago

I've sent you a private message about this. Thank you.

C
CDMOD@SOTI
2 years ago