1# Application Permissions
2
3The way to request permissions varies, depending on the scope of the permissions and the authorization mode.
4
5The system provides the following permissions. You can determine the appropriate way to apply for the permissions based on actual situation.
6
7- [Open system_grant permissions](permissions-for-all.md)
8
9   The permissions are available to all applications and granted by the system. After an application requests this type of permissions, the system automatically grants the permissions to the application when the application is installed.
10
11- [Open user_grant permissions](permissions-for-all-user.md)
12
13   The permissions are available to all applications and granted by the user. After an application requests this type of permissions, the permissions must be authorized by the user in a dialog box during the running of the application.
14
15- [Permissions for enterprise applications](permissions-for-enterprise-apps.md)
16
17   The permissions are available only to normal enterprise applications, mobile device management (MDM) applications<!--Del-->, and system applications<!--DelEnd-->. The applications with the distribution type (**app-distribution-type**) of **enterprise_normal** (normal enterprise application) or **enterprise_mdm** (MDM application) can request this type of permissions. When requesting such a permission, you need to determine the authorization mode first.
18
19- [Permissions for MDM applications](permissions-for-mdm-apps.md)
20
21  The permissions are available only to [MDM](../../mdm/mdm-kit-intro.md) applications. When requesting such a permission, you need to determine the authorization mode first.
22
23<!--Del-->
24- [Permissions for system applications](permissions-for-system-apps.md)
25
26   The permissions are available only to system applications and system services. The permissions can be classified into the following types:
27
28   1. system_grant permissions that can be requested via the Access Control List (ACL):
29
30       The permissions can be requested via the [ACL](declare-permissions-in-acl.md) and are authorized by the system. The ACL allows a system application or system service to have permissions beyond its Ability Privilege Level (APL). When the application is installed, the system automatically grants the requested permissions to the application.
31   2. system_grant permissions that cannot be requested via the ACL:
32
33       You need to quey the application's APL and determine whether the application can request the permissions. When the application is installed, the system automatically grants the requested permissions to the application.
34
35   3. user_grant permissions that can be requested via the ACL:
36
37       The permissions can be requested via the [ACL](declare-permissions-in-acl.md) and must be authorized by the user. After an application requests this type of permissions via the ACL, the permissions must be authorized by the user in a dialog box during the running of the application.
38
39<!--DelEnd-->
40