1# Open user_grant Permissions
2
3All the permissions in this topic are available to all applications and granted by the user.
4
5This type of permissions must be declared in the application installation package and authorized by the user in a dialog box during the running of the application. The application has the permission only after the user has granted the permission.
6
7<!--Del-->
8> **NOTE**
9> "Enable via ACL" is not involved for permissions of the normal level.
10<!--DelEnd-->
11
12## Request Mode
13
14The [user_grant permissions](app-permission-mgmt-overview.md#user_grant-user-authorization) are permissions granted by users. For details about how to request this type of permissions, see [Declaring Permissions](declare-permissions.md) &gt; [Requesting User Authorization](request-user-authorization.md).
15
16## ohos.permission.ACCESS_BLUETOOTH
17
18Allows an application to access Bluetooth and use Bluetooth capabilities, such as pairing and connecting to peripheral devices.
19
20**Permission level**: normal
21
22**Authorization mode**: user_grant
23
24**Valid since**: 10
25
26## ohos.permission.MEDIA_LOCATION
27
28Allows an application to access geographical locations in the user's media file.
29
30**Permission level**: normal
31
32**Authorization mode**: user_grant
33
34**Valid since**: 7
35
36## ohos.permission.APP_TRACKING_CONSENT
37
38Allows an application to read the open anonymous device identifier (OAID).
39
40**Permission level**: normal
41
42**Authorization mode**: user_grant
43
44**Valid since**: 9
45
46## ohos.permission.ACTIVITY_MOTION
47
48Allows an application to read the current workout status of the user, such as detecting whether the user is working out and recording the number of steps the user has taken.
49
50**Permission level**: normal
51
52**Authorization mode**: user_grant
53
54**Valid since**: 7
55
56## ohos.permission.CAMERA
57
58Allows an application to use the camera.
59
60**Permission level**: normal
61
62**Authorization mode**: user_grant
63
64**Valid since**: 9
65
66## ohos.permission.DISTRIBUTED_DATASYNC
67
68Allows the application data to be exchanged between devices.
69
70**Permission level**: normal
71
72**Authorization mode**: user_grant
73
74**Valid since**: 7
75
76## ohos.permission.LOCATION_IN_BACKGROUND
77
78Allows an application running in the background to obtain the device location.
79
80For security purposes, this permission cannot be granted to applications in a dialog box. If an application needs this permission, direct the user to manually grant this permission on the **Settings** screen.
81
82**Procedure**:
83
841. [Declare permissions](declare-permissions.md) in the **module.json5** file.
85
86   You must request the foreground location permission before requesting the background permission. Therefore, you must declare both the ohos.permission.LOCATION_IN_BACKGROUND permission and the foreground location permission. The foreground location permissions include the following:
87   - Request [ohos.permission.APPROXIMATELY_LOCATION](#ohospermissionapproximately_location).
88   - Request [ohos.permission.APPROXIMATELY_LOCATION](#ohospermissionapproximately_location) and [ohos.permission.LOCATION](#ohospermissionlocation).
892. Request the foreground location permission from the user through a pop-up window.
903. After the user grants the foreground location permissions, display a message to direct the user to go to the **Settings** screen to grant the ohos.permission.LOCATION_IN_BACKGROUND permission.
914. The permission is granted to the application if the user selects **Always allow** on the **Settings** screen.
92
93   Paths:
94   <!--RP1-->
95   - Path 1: **Settings** > **Privacy** > **Permission manager** > **Permissions** > **Location** > *Target application*
96   - Path 2: **Settings** > **Privacy** > **Permission manager** > **Apps** > *Target application* > Location
97   <!--RP1End-->
98
99**Permission level**: normal
100
101**Authorization mode**: user_grant
102
103**Valid since**: 7
104
105## ohos.permission.LOCATION
106
107Allows an application to obtain the device location.
108
109**Prerequisites**: This permission must be requested with [ohos.permission.APPROXIMATELY_LOCATION](#ohospermissionapproximately_location) together.
110
111**Permission level**: normal
112
113**Authorization mode**: user_grant
114
115**Valid since**: 7
116
117## ohos.permission.APPROXIMATELY_LOCATION
118
119Allows an application to obtain the approximate location information of a device.
120
121**Permission level**: normal
122
123**Authorization mode**: user_grant
124
125**Valid since**: 9
126
127## ohos.permission.MICROPHONE
128
129Allows an application to access the microphone.
130
131**Permission level**: normal
132
133**Authorization mode**: user_grant
134
135**Valid since**: 8
136
137## ohos.permission.READ_CALENDAR
138
139Allows an application to read Calendar data.
140
141**Permission level**: normal
142
143**Authorization mode**: user_grant
144
145**Valid since**: 8
146
147## ohos.permission.WRITE_CALENDAR
148
149Allows an application to add, remove, and modify Calendar events.
150
151**Permission level**: normal
152
153**Authorization mode**: user_grant
154
155**Valid since**: 8
156
157## ohos.permission.READ_HEALTH_DATA
158
159Allows an application to read the health data of the user.
160
161**Permission level**: normal
162
163**Authorization mode**: user_grant
164
165**Valid since**: 7
166
167## ohos.permission.ACCESS_NEARLINK
168
169Allows an application to use NearLink, such as device pairing and connecting to nearby devices.
170
171**Permission level**: normal
172
173**Authorization mode**: user_grant
174
175**Valid since**: 12
176
177## ohos.permission.READ_WRITE_DOWNLOAD_DIRECTORY
178
179Allows an application to access the **Download** directory and its subdirectories in the user directory.
180
181Currently, this permission is available only to 2-in-1 device applications.
182
183<!--RP2--><!--RP2End-->
184
185**Permission level**: system_basic for API version 11 and normal for API versions 12 and later.
186
187**Authorization mode**: user_grant
188
189**Valid since**: 11
190
191## ohos.permission.READ_WRITE_DOCUMENTS_DIRECTORY
192
193Allows an application to access the **Documents** directory and its subdirectories in the user directory.
194
195Currently, this permission is available only to 2-in-1 device applications.
196
197<!--RP2--><!--RP2End-->
198
199**Permission level**: system_basic for API version 11 and normal for API versions 12 and later.
200
201**Authorization mode**: user_grant
202
203**Valid since**: 11
204
205## ohos.permission.READ_MEDIA
206
207Allows an application to read media files from the user's external storage.
208
209**Permission level**: normal
210
211**Authorization mode**: user_grant
212
213**Valid since**: 7
214
215**Deprecated from**: 12
216
217**Substitute**:
218
219See the [alternative solution of the **Files** permission group](app-permission-group-list.md#filesdeprecated).
220
221## ohos.permission.WRITE_MEDIA
222
223Allows an application to read media files from and write media files into the user's external storage.
224
225**Permission level**: normal
226
227**Authorization mode**: user_grant
228
229**Valid since**: 7
230
231**Deprecated from**: 12
232
233**Substitute**:
234
235See the [alternative solution of the **Files** permission group](app-permission-group-list.md#filesdeprecated).
236