1. Home
  2. Knowledge Base
  3. SureMDM
  4. Android Management
  5. How to remotely grant special application permissions using the Run Script on Android devices

How to remotely grant special application permissions using the Run Script on Android devices

A special access permission helps access to the system resources that are not directly related to user’s privacy. These permissions are different from install-time or run-time permissions.

At times end users might forget to grant these special permissions, and for a few applications to work it may be mandatory to grant those special permissions based on application functionality. SureMDM Admins can now grant such few special permissions to applications from the SureMDM console through a run script job, without having to depend on the end user’s intervention.


The purpose of this knowledge article is to provide a guide on the process of granting special access to third-party apps using a  run script job from the SureMDM console.


  • It is supported only on Device Owner (company-owned devices) and Platform-Signed devices (EA devices).
  • Users should enter the particular package name in the run script to allow the permission for that package.


  1. Log in to the SureMDM console.
  2. Navigate to the Jobs tab.
  3. Select the OS as Android and click on the Run Script job.
  1. Paste the script provided below, give the job a name, and save it.



The following integer_value are shown for the respective permissions:

Enabled Usage Access 43
Configure System Permission23
Enable Display over other apps24
Picture in Picture67
Enable all file access92

5. Go back to SureMDM Home, select the device(s) from the device list, or select a group.

6. Click Apply to launch the Apply Job To Device prompt.

7. In the Apply Job to Device prompt, select the job and click Apply.

Once the job is applied, the permissions are granted on the device end.

Example of Chrome before and after pushing the Run Script:

Need help? CONTACT US

Was this helpful?
Updated on March 2024