1# Permissions for MDM Applications 2 3The following permissions are available only to Mobile Device Management (MDM) applications. For details about MDM applications, see [Introduction to MDM Kit](../../mdm/mdm-kit-intro.md). 4 5## ohos.permission.ENTERPRISE_GET_DEVICE_INFO 6 7Allows an application to activate a device administrator application. 8 9**Permission level**: system_basic 10 11**Authorization mode**: system_grant 12 13<!--Del--> 14**Enable via ACL**: true<!--DelEnd--> 15 16**Valid since**: 10 17 18## ohos.permission.ENTERPRISE_GET_NETWORK_INFO 19 20Allows a device administrator application to query network information. 21 22**Permission level**: system_basic 23 24**Authorization mode**: system_grant 25 26<!--Del--> 27**Enable via ACL**: true<!--DelEnd--> 28 29**Valid since**: 10 30 31## ohos.permission.ENTERPRISE_INSTALL_BUNDLE 32 33Allows a device administrator application to install and uninstall applications. 34 35**Permission level**: system_core 36 37**Authorization mode**: system_grant 38 39<!--Del--> 40**Enable via ACL**: true<!--DelEnd--> 41 42**Valid since**: 10 43 44## ohos.permission.ENTERPRISE_MANAGE_SET_APP_RUNNING_POLICY 45 46Allows a device administrator application to set application running policies. 47 48**Permission level**: system_basic 49 50**Authorization mode**: system_grant 51 52<!--Del--> 53**Enable via ACL**: true<!--DelEnd--> 54 55**Valid since**: 10 56 57## ohos.permission.ENTERPRISE_RESET_DEVICE 58 59Allows a device administrator application to restore devices' factory settings. 60 61**Permission level**: system_basic 62 63**Authorization mode**: system_grant 64 65<!--Del--> 66**Enable via ACL**: true<!--DelEnd--> 67 68**Valid since**: 10 69 70## ohos.permission.ENTERPRISE_SET_ACCOUNT_POLICY 71 72Allows a device administrator application to set account management policies. 73 74**Permission level**: system_basic 75 76**Authorization mode**: system_grant 77 78<!--Del--> 79**Enable via ACL**: true<!--DelEnd--> 80 81**Valid since**: 10 82 83## ohos.permission.ENTERPRISE_SET_BUNDLE_INSTALL_POLICY 84 85Allows a device administrator application to set bundle installation policies. 86 87**Permission level**: system_basic 88 89**Authorization mode**: system_grant 90 91<!--Del--> 92**Enable via ACL**: true<!--DelEnd--> 93 94**Valid since**: 10 95 96## ohos.permission.ENTERPRISE_SET_DATETIME 97 98Allows a device administrator application to set the system time. 99 100**Permission level**: system_basic 101 102**Authorization mode**: system_grant 103 104<!--Del--> 105**Enable via ACL**: true<!--DelEnd--> 106 107**Valid since**: 9 108 109## ohos.permission.ENTERPRISE_SET_NETWORK 110 111Allows a device administrator application to set network information. 112 113**Permission level**: system_basic 114 115**Authorization mode**: system_grant 116 117<!--Del--> 118**Enable via ACL**: true<!--DelEnd--> 119 120**Valid since**: 10 121 122## ohos.permission.ENTERPRISE_SET_WIFI 123 124Allows a device administrator application to set and query Wi-Fi information. 125 126**Permission level**: system_basic 127 128**Authorization mode**: system_grant 129 130<!--Del--> 131**Enable via ACL**: true<!--DelEnd--> 132 133**Valid since**: 10 134 135## ohos.permission.ENTERPRISE_SUBSCRIBE_MANAGED_EVENT 136 137Allows a device administrator application to subscribe to management events. 138 139**Permission level**: system_basic 140 141**Authorization mode**: system_grant 142 143<!--Del--> 144**Enable via ACL**: true<!--DelEnd--> 145 146**Valid since**: 9 147 148## ohos.permission.ENTERPRISE_RESTRICT_POLICY 149 150Allows a device administrator application to deliver and obtain restriction policies. 151 152**Permission level**: system_basic 153 154**Authorization mode**: system_grant 155 156<!--Del--> 157**Enable via ACL**: true<!--DelEnd--> 158 159**Valid since**: 10 160 161## ohos.permission.ENTERPRISE_SET_SCREENOFF_TIME 162 163Allows the device administrator application to set the screen off time. 164 165**Permission level**: system_basic 166 167**Authorization mode**: system_grant 168 169<!--Del--> 170**Enable via ACL**: true<!--DelEnd--> 171 172**Valid since**: 10 173 174## ohos.permission.ENTERPRISE_MANAGE_USB 175 176Allows a device administrator application to manage the USB. 177 178**Permission level**: system_basic 179 180**Authorization mode**: system_grant 181 182<!--Del--> 183**Enable via ACL**: true<!--DelEnd--> 184 185**Valid since**: 10 186 187## ohos.permission.ENTERPRISE_MANAGE_NETWORK 188 189Allows a device administrator application to manage the network. 190 191**Permission level**: system_basic 192 193**Authorization mode**: system_grant 194 195<!--Del--> 196**Enable via ACL**: true<!--DelEnd--> 197 198**Valid since**: 10 199 200## ohos.permission.ENTERPRISE_MANAGE_CERTIFICATE 201 202Allows a device administrator application to manage certificates. 203 204**Permission level**: system_basic 205 206**Authorization mode**: system_grant 207 208<!--Del--> 209**Enable via ACL**: true<!--DelEnd--> 210 211**Valid since**: 10 212 213## ohos.permission.ENTERPRISE_GET_SETTINGS 214 215Allows a device administrator application to obtain the **Settings** application data. 216 217**Permission level**: system_basic 218 219**Authorization mode**: system_grant 220 221<!--Del--> 222**Enable via ACL**: true<!--DelEnd--> 223 224**Valid since**: 10 225 226## ohos.permission.INSTALL_ENTERPRISE_MDM_BUNDLE 227 228Allows installation of enterprise MDM applications on enterprise devices. 229 230**Permission level**: system_core 231 232**Authorization mode**: system_grant 233 234<!--Del--> 235**Enable via ACL**: true<!--DelEnd--> 236 237**Valid since**: 10 238 239## ohos.permission.INSTALL_SELF_BUNDLE 240 241Allows automatic updates of enterprise MDM applications on enterprise devices. 242 243**Permission level**: system_core 244 245**Authorization mode**: system_grant 246 247<!--Del--> 248**Enable via ACL**: true<!--DelEnd--> 249 250**Valid since**: 10 251 252## ohos.permission.ENTERPRISE_SET_BROWSER_POLICY 253 254Allows the device to set or cancel browser policies. 255 256**Permission level**: system_basic 257 258**Authorization mode**: system_grant 259 260<!--Del--> 261**Enable via ACL**: true<!--DelEnd--> 262 263**Valid since**: 10 264 265## ohos.permission.SET_ENTERPRISE_INFO 266 267Allows a device administrator application to set enterprise information. 268 269**Permission level**: system_basic 270 271**Authorization mode**: system_grant 272 273<!--Del--> 274**Enable via ACL**: true<!--DelEnd--> 275 276**Valid since**: 9 277 278## ohos.permission.ENTERPRISE_MANAGE_SECURITY 279 280Allows a device administrator application to set security management policies for devices. 281 282**Permission level**: system_basic 283 284**Authorization mode**: system_grant 285 286<!--Del--> 287**Enable via ACL**: true<!--DelEnd--> 288 289**Valid since**: 11 290 291## ohos.permission.ENTERPRISE_MANAGE_BLUETOOTH 292 293Allows a device administrator application to set and obtain Bluetooth information. 294 295**Permission level**: system_basic 296 297**Authorization mode**: system_grant 298 299<!--Del--> 300**Enable via ACL**: true<!--DelEnd--> 301 302**Valid since**: 11 303 304## ohos.permission.ENTERPRISE_MANAGE_SYSTEM 305 306Allows a device administrator application to manage system parameters. 307 308**Permission level**: system_basic 309 310**Authorization mode**: system_grant 311 312<!--Del--> 313**Enable via ACL**: true<!--DelEnd--> 314 315**Valid since**: 11 316 317## ohos.permission.ENTERPRISE_MANAGE_WIFI 318 319Allows a device administrator application to set and obtain Wi-Fi information. 320 321**Permission level**: system_basic 322 323**Authorization mode**: system_grant 324 325<!--Del--> 326**Enable via ACL**: true<!--DelEnd--> 327 328**Valid since**: 11 329 330## ohos.permission.ENTERPRISE_MANAGE_RESTRICTIONS 331 332Allows a device administrator application to manage restriction policies. 333 334**Permission level**: system_basic 335 336**Authorization mode**: system_grant 337 338<!--Del--> 339**Enable via ACL**: true<!--DelEnd--> 340 341**Valid since**: 11 342 343## ohos.permission.ENTERPRISE_MANAGE_APPLICATION 344 345Allows a device administrator application to manage application policies. 346 347**Permission level**: system_basic 348 349**Authorization mode**: system_grant 350 351<!--Del--> 352**Enable via ACL**: true<!--DelEnd--> 353 354**Valid since**: 11 355 356## ohos.permission.ENTERPRISE_MANAGE_LOCATION 357 358Allows a device administrator application to set and obtain location information. 359 360**Permission level**: system_basic 361 362**Authorization mode**: system_grant 363 364<!--Del--> 365**Enable via ACL**: true<!--DelEnd--> 366 367**Valid since**: 11 368 369## ohos.permission.ENTERPRISE_REBOOT 370 371Allows a device administrator application to shut down and restart devices. 372 373**Permission level**: system_basic 374 375**Authorization mode**: system_grant 376 377<!--Del--> 378**Enable via ACL**: true<!--DelEnd--> 379 380**Valid since**: 11 381 382## ohos.permission.ENTERPRISE_LOCK_DEVICE 383 384Allows a device administrator application to lock devices. 385 386**Permission level**: system_basic 387 388**Authorization mode**: system_grant 389 390<!--Del--> 391**Enable via ACL**: true<!--DelEnd--> 392 393**Valid since**: 11 394 395## ohos.permission.ENTERPRISE_MANAGE_SETTINGS 396 397Allows a device administrator application to manage settings. 398 399**Permission level**: system_basic 400 401**Authorization mode**: system_grant 402 403<!--Del--> 404**Enable via ACL**: true<!--DelEnd--> 405 406**Valid since**: 11 407 408## ohos.permission.ENTERPRISE_OPERATE_DEVICE 409 410Allows a device administrator application to operate devices. 411 412**Permission level**: system_basic 413 414**Authorization mode**: system_grant 415 416<!--Del--> 417**Enable via ACL**: true<!--DelEnd--> 418 419**Valid since**: 12 420 421## ohos.permission.ENTERPRISE_ADMIN_MANAGE 422 423Allows a device administrator application to manage the device administrator. 424 425**Permission level**: system_basic 426 427**Authorization mode**: system_grant 428 429<!--Del--> 430**Enable via ACL**: true<!--DelEnd--> 431 432**Valid since**: 12 433 434## ohos.permission.QUERY_AUDIT_EVENT 435 436Allows an MDM application to query audit events. 437 438**Permission level**: system_basic 439 440**Authorization mode**: system_grant 441 442<!--Del--> 443**Enable via ACL**: true<!--DelEnd--> 444 445**Valid since**: 12 446 447## ohos.permission.ENTERPRISE_RECOVERY_KEY 448 449Allows an application to manage the enterprise recovery keys. 450 451**Permission level**: system_core 452 453**Authorization mode**: system_grant 454 455<!--Del--> 456**Enable via ACL**: true<!--DelEnd--> 457 458**Valid since**: 13 459 460## ohos.permission.ENTERPRISE_MANAGE_DELEGATED_POLICY 461 462Allows a device administrator application to delegate other applications to set device management policies. 463 464**Permission level**: system_basic 465 466**Authorization mode**: system_grant 467 468<!--Del--> 469**Enable via ACL**: true<!--DelEnd--> 470 471**Valid since**: 14 472