Forum Discussion

jrngsg's avatar
jrngsg
Iron Contributor
Sep 28, 2023
Solved

location permission per app

we have an app that requires to set 'Allow all the time' for location permission. We are using Intune MDM and the android 13 enrolled device are using the enrolment of android enterprise corporate-owned fully managed and corporate-owned with work profile.
 
In Intune, there is app config and I set both location auto grant and deploy to the devices.

 


 

After the app config is deployed successfully to the device, I checked the location permission for the app is still 'don't allow'

 


 

 
Then I launch the app to accept the location permission prompt to select 'allow only while using the app'. However, the user is still able to change location permission for the app.

 


 

 
Question is this by design that user is able to change the location permission of an app even it is set as auto grant in MDM? Is there a way or is it by design that google does not allow MDM to set 'allow all the time' for an app location permission and it needs to be set by user manually? Could not find any official answer from google or microsoft on this location privacy thing if it is by design.
 
  • Hi jrngsg,

    Yes, by design, users are able to change the location permission of an app even if it is set to auto grant in MDM.

    Google has designed Android to give users control over their privacy, including their location data. This means that even if you use MDM to set an app's location permission to auto grant, the user can still override that setting and choose a different permission level.

    There is no way to use MDM to force an app to have 'allow all the time' location permission. This is also by design. Google wants to give users the ability to choose how their location data is used, even if their device is managed by an MDM.

    Microsoft Intune is aware of this limitation and has confirmed that it is by design.

    There are a few things you can do to encourage users to grant your app 'allow all the time' location permission:

    • Explain to users why your app needs 'allow all the time' location permission and how it will use their data.
    • Make sure your app's privacy policy is clear and concise and that it explains how you will use location data.
    • Consider using a feature like Android's permission rationale to explain to users why your app needs 'allow all the time' location permission.
    • Offer users a way to easily grant 'allow all the time' location permission from within your app.

    However, it is important to remember that users may still choose to deny 'allow all the time' location permission, even after you have explained why your app needs it.

    Please click Mark as Best Response & Like if my post helped you to solve your issue.
    This will help others to find the correct solution easily. It also closes the item.


    If the post was useful in other ways, please consider giving it Like.


    Kindest regards,


    Leon Pavesic
    (LinkedIn)

1 Reply

  • LeonPavesic's avatar
    LeonPavesic
    Silver Contributor

    Hi jrngsg,

    Yes, by design, users are able to change the location permission of an app even if it is set to auto grant in MDM.

    Google has designed Android to give users control over their privacy, including their location data. This means that even if you use MDM to set an app's location permission to auto grant, the user can still override that setting and choose a different permission level.

    There is no way to use MDM to force an app to have 'allow all the time' location permission. This is also by design. Google wants to give users the ability to choose how their location data is used, even if their device is managed by an MDM.

    Microsoft Intune is aware of this limitation and has confirmed that it is by design.

    There are a few things you can do to encourage users to grant your app 'allow all the time' location permission:

    • Explain to users why your app needs 'allow all the time' location permission and how it will use their data.
    • Make sure your app's privacy policy is clear and concise and that it explains how you will use location data.
    • Consider using a feature like Android's permission rationale to explain to users why your app needs 'allow all the time' location permission.
    • Offer users a way to easily grant 'allow all the time' location permission from within your app.

    However, it is important to remember that users may still choose to deny 'allow all the time' location permission, even after you have explained why your app needs it.

    Please click Mark as Best Response & Like if my post helped you to solve your issue.
    This will help others to find the correct solution easily. It also closes the item.


    If the post was useful in other ways, please consider giving it Like.


    Kindest regards,


    Leon Pavesic
    (LinkedIn)

Resources