MAM | App seeking permission to access contacts

[AnuragSrivastava]

I created MAM policy and marked few of our corporate applications as protected.

Now when trying to open OneDrive App (protected) and access a file, it prompts for permission to access contacts.

Is there a way we can avoid this prompt as we don't want our apps to access contacts.

[#2]

Hi AnuragSrivastava,

Are you on Android or IOS? Can you attach a screenshot? I’ve been using MAM policies, never ran to this issue, also don’t see it under my OneDrive app permission.

Moe

[#3]

Its strange it prompts you for permissions maybe this could be a solution? TO create a managed device policy to specify some auto grant for some type of permissions?

[#4]

@Moe_Kinani 

This is an Android device. I have attached the screenshot, since this is a corporate app..so we don't want allow the app to seek permissions for personal contacts.

[#5]

In our case, the device is not enrolled to Intune, we are just managing it through MAM.

Is it a mandatory feature for apps to require permission to contacts.

[#6]

Is the below (Screenshot) configured? If yes, can you please change it to not Require-

Work or school account credentials for access

I think it asks for access to Contact to find any work or school account under the users contact.

Hope it helps!
Moe

[#7]

Looking at the screenshot you send, this is something else than an app seeking app contact permissions and indeed looks more what Moe has replied.

[#8]

@Moe_Kinani

The value for Work or school account credentials for access is already set to Not Required, still getting the same prompt while accessing the file.

[#9]

Do you have app configuration policies configured? I don’t think this prompt is coming from App Protection Policy, I would review the group assignment in case it used by another policy within Intune.

Moe

[#10]

@Moe_Kinani I haven't configured the app configuration policy. Any particular settings which I would need to have in place under app configuration policies.

[#11]

No need if you don’t have it configured. Can you create new policy with only one device group and see if you see the prompt? I did the same setting on my end (Android) and didn’t receive the prompt.

Moe