With Intune’s April (2204) service release, admins will no longer be able to auto grant camera, location, and microphone permissions for Android Enterprise personally-owned work profile devices. If the auto grant option is chosen for the “Default app permissions” device restrictions setting, then camera, microphone, and location permissions will still be prompted for.
The following permissions are included:
- Camera: CAMERA
- Location access (fine): ACCESS_FINE_LOCATION
- Location access (coarse): ACCESS_COARSE_LOCATION
- Location access (background): ACCESS_BACKGROUND_LOCATION
- Access media location: ACCESS_MEDIA_LOCATION
- Record audio: RECORD_AUDIO
- Record background audio: RECORD_BACKGROUND_AUDIO
Additionally, if the auto grant option is chosen for permissions through an app configuration policy, then camera, microphone, and location permissions will still be prompted for.
How this will affect your organization
If you have Auto grant selected for the “Default app permissions” device restrictions setting or set through app configuration policy for camera, microphone, or location permissions, apps requiring these permissions for the first time will prompt for these permissions.
For apps that already have these permissions auto granted due to existing policies, we will not prompt in the future for these camera, microphone, and location permissions for these apps.
User impact: If users on devices that were previously targeted with auto grant policies have apps that need these permissions for the first time, users will be prompted to allow access.
Important: If you are using a Mobile Threat Detection app that requires location permissions, after this change, users may need to allow location permissions when prompted to maintain device compliance.
Message ID: MC317767
Updated: 01 March 2022
Plan for Change