MAM | App seeking permission to access contacts

%3CLINGO-SUB%20id%3D%22lingo-sub-2445509%22%20slang%3D%22en-US%22%3EMAM%20%7C%20App%20seeking%20permission%20to%20access%20contacts%3C%2FLINGO-SUB%3E%3CLINGO-BODY%20id%3D%22lingo-body-2445509%22%20slang%3D%22en-US%22%3E%3CDIV%3E%3CDIV%20class%3D%22%22%3E%3CDIV%20class%3D%22public-DraftStyleDefault-block%20public-DraftStyleDefault-ltr%22%3E%3CSPAN%3EI%20created%20MAM%20policy%20and%20marked%20few%20of%20our%20corporate%20applications%20as%20protected.%3C%2FSPAN%3E%3C%2FDIV%3E%3CDIV%20class%3D%22public-DraftStyleDefault-block%20public-DraftStyleDefault-ltr%22%3E%26nbsp%3B%3C%2FDIV%3E%3C%2FDIV%3E%3CDIV%20class%3D%22%22%3E%3CDIV%20class%3D%22public-DraftStyleDefault-block%20public-DraftStyleDefault-ltr%22%3E%3CSPAN%3ENow%20when%20trying%20to%20open%20OneDrive%20App%20(protected)%20and%20access%20a%20file%2C%20it%20prompts%20for%20permission%20to%20access%20contacts.%3C%2FSPAN%3E%3C%2FDIV%3E%3CDIV%20class%3D%22public-DraftStyleDefault-block%20public-DraftStyleDefault-ltr%22%3E%26nbsp%3B%3C%2FDIV%3E%3C%2FDIV%3E%3CDIV%20class%3D%22%22%3E%3CDIV%20class%3D%22public-DraftStyleDefault-block%20public-DraftStyleDefault-ltr%22%3E%3CSPAN%3EIs%20there%20a%20way%20we%20can%20avoid%20this%20prompt%20as%20we%20don't%20want%20our%20apps%20to%20access%20contacts.%3C%2FSPAN%3E%3C%2FDIV%3E%3C%2FDIV%3E%3C%2FDIV%3E%3C%2FLINGO-BODY%3E%3CLINGO-LABS%20id%3D%22lingo-labs-2445509%22%20slang%3D%22en-US%22%3E%3CLINGO-LABEL%3EMicrosoft%20Intune%3C%2FLINGO-LABEL%3E%3CLINGO-LABEL%3EMobile%20Application%20Management%20(MAM)%3C%2FLINGO-LABEL%3E%3C%2FLINGO-LABS%3E%3CLINGO-SUB%20id%3D%22lingo-sub-2446847%22%20slang%3D%22en-US%22%3ERe%3A%20MAM%20%7C%20App%20seeking%20permission%20to%20access%20contacts%3C%2FLINGO-SUB%3E%3CLINGO-BODY%20id%3D%22lingo-body-2446847%22%20slang%3D%22en-US%22%3EHi%20AnuragSrivastava%2C%3CBR%20%2F%3E%3CBR%20%2F%3EAre%20you%20on%20Android%20or%20IOS%3F%20Can%20you%20attach%20a%20screenshot%3F%20I%E2%80%99ve%20been%20using%20MAM%20policies%2C%20never%20ran%20to%20this%20issue%2C%20also%20don%E2%80%99t%20see%20it%20under%20my%20OneDrive%20app%20permission.%3CBR%20%2F%3E%3CBR%20%2F%3EMoe%3C%2FLINGO-BODY%3E%3CLINGO-SUB%20id%3D%22lingo-sub-2446987%22%20slang%3D%22en-US%22%3ERe%3A%20MAM%20%7C%20App%20seeking%20permission%20to%20access%20contacts%3C%2FLINGO-SUB%3E%3CLINGO-BODY%20id%3D%22lingo-body-2446987%22%20slang%3D%22en-US%22%3E%3CP%3EIts%20strange%20it%20prompts%20you%20for%20permissions%20maybe%20this%20could%20be%20a%20solution%3F%20TO%20create%20a%20managed%20device%20policy%20to%20specify%20some%20auto%20grant%20for%20some%20type%20of%20permissions%3F%3C%2FP%3E%3CP%3E%26nbsp%3B%3C%2FP%3E%3CP%3E%3CSPAN%20class%3D%22lia-inline-image-display-wrapper%20lia-image-align-inline%22%20image-alt%3D%22Rudy_Ooms_0-1623734458467.png%22%20style%3D%22width%3A%20400px%3B%22%3E%3CIMG%20src%3D%22https%3A%2F%2Ftechcommunity.microsoft.com%2Ft5%2Fimage%2Fserverpage%2Fimage-id%2F288612i5CBF010FAF56DB6F%2Fimage-size%2Fmedium%3Fv%3Dv2%26amp%3Bpx%3D400%22%20role%3D%22button%22%20title%3D%22Rudy_Ooms_0-1623734458467.png%22%20alt%3D%22Rudy_Ooms_0-1623734458467.png%22%20%2F%3E%3C%2FSPAN%3E%3C%2FP%3E%3CP%3E%26nbsp%3B%3C%2FP%3E%3C%2FLINGO-BODY%3E%3CLINGO-SUB%20id%3D%22lingo-sub-2447548%22%20slang%3D%22en-US%22%3ERe%3A%20MAM%20%7C%20App%20seeking%20permission%20to%20access%20contacts%3C%2FLINGO-SUB%3E%3CLINGO-BODY%20id%3D%22lingo-body-2447548%22%20slang%3D%22en-US%22%3E%3CP%3E%3CA%20href%3D%22https%3A%2F%2Ftechcommunity.microsoft.com%2Ft5%2Fuser%2Fviewprofilepage%2Fuser-id%2F503735%22%20target%3D%22_blank%22%3E%40Moe_Kinani%3C%2FA%3E%26nbsp%3B%3C%2FP%3E%3CP%3EThis%20is%20an%20Android%20device.%20I%20have%20attached%20the%20screenshot%2C%20since%20this%20is%20a%20corporate%20app..so%20we%20don't%20want%20allow%20the%20app%20to%20seek%20permissions%20for%20personal%20contacts.%3C%2FP%3E%3C%2FLINGO-BODY%3E%3CLINGO-SUB%20id%3D%22lingo-sub-2447565%22%20slang%3D%22en-US%22%3ERe%3A%20MAM%20%7C%20App%20seeking%20permission%20to%20access%20contacts%3C%2FLINGO-SUB%3E%3CLINGO-BODY%20id%3D%22lingo-body-2447565%22%20slang%3D%22en-US%22%3EIn%20our%20case%2C%20the%20device%20is%20not%20enrolled%20to%20Intune%2C%20we%20are%20just%20managing%20it%20through%20MAM.%3CBR%20%2F%3E%3CBR%20%2F%3EIs%20it%20a%20mandatory%20feature%20for%20apps%20to%20require%20permission%20to%20contacts.%3C%2FLINGO-BODY%3E
Contributor
I created MAM policy and marked few of our corporate applications as protected.
 
Now when trying to open OneDrive App (protected) and access a file, it prompts for permission to access contacts.
 
Is there a way we can avoid this prompt as we don't want our apps to access contacts.
10 Replies
Hi AnuragSrivastava,

Are you on Android or IOS? Can you attach a screenshot? I’ve been using MAM policies, never ran to this issue, also don’t see it under my OneDrive app permission.

Moe

Its strange it prompts you for permissions maybe this could be a solution? TO create a managed device policy to specify some auto grant for some type of permissions?

 

Rudy_Ooms_0-1623734458467.png

 

@Moe_Kinani 

This is an Android device. I have attached the screenshot, since this is a corporate app..so we don't want allow the app to seek permissions for personal contacts.

In our case, the device is not enrolled to Intune, we are just managing it through MAM.

Is it a mandatory feature for apps to require permission to contacts.
Is the below (Screenshot) configured? If yes, can you please change it to not Require-

Work or school account credentials for access

I think it asks for access to Contact to find any work or school account under the users contact.

Hope it helps!
Moe
Looking at the screenshot you send, this is something else than an app seeking app contact permissions and indeed looks more what Moe has replied.
@Moe_Kinani

The value for Work or school account credentials for access is already set to Not Required, still getting the same prompt while accessing the file.
Do you have app configuration policies configured? I don’t think this prompt is coming from App Protection Policy, I would review the group assignment in case it used by another policy within Intune.

Moe

@Moe_Kinani I haven't configured the app configuration policy. Any particular settings which I would need to have in place under app configuration policies.

No need if you don’t have it configured. Can you create new policy with only one device group and see if you see the prompt? I did the same setting on my end (Android) and didn’t receive the prompt.

Moe