Hi everyone, today we have another post from Intune Support Engineer Saurabh Sarkar. In this article, Saurabh talks about kiosk mode and the different options available for the Android and iOS platfo...
Updated Jun 27, 2019
Version 3.0
Blog Post
Hi Daniel Harrison ,
The app config policy should be for the 3rd party app. First of all, just to prove that it's actually possible, some apps are better than others, is to "Any-Any 
" equivalent settings, like below:-
If it works, then harden all the permissions until it breaks and then revert back one permission. Also, 'Auto Grant' is the best way to go as the Kiosk build by nature will not always allow an apps notification to appear on top. Most do, but not all.
I have used this for 90% of the apps that rely on system or built-in resources. WhatsApp, etc. all require app config policies.
Good luck,
PS - Here are the icons for the apps I used to replace the camera and gallery system apps. I also ended up having to deploy
these to the departments Fully Manged build too; as they really liked them!
https://play.google.com/work/apps/details?id=com.simplemobiletools.gallery
https://play.google.com/work/apps/details?id=net.sourceforge.opencamera