It is good practice for an Android Device user to be vigilant and check what permissions an app requires to see whether they are needed for the application's functionality.

The 2X MDM Client Application requires certain permissions from the Android OS to perform its functions. The 2X MDM Android Permissions requested are:

YOUR ACCOUNTS
USE THE AUTHENTICATION CREDENTIALS OF AN ACCOUNT
Google Description: Allows the app to request authentication tokens.
2X MDM Requirement: 2X MDM Server uses the authentication token to confirm with Google that the user's email identity is valid. This is only used when the device is registering with the 2X MDM Server for the first time.

DISCOVER KNOWN ACCOUNTS
Google Description: Allows the app to get the list of accounts known by the tablet. Allows the app to get the list of accounts known by the phone.
2X MDM Requirement: The 2X MDM Server retrieves the device email address, which is required to differentiate between the devices in the Device List.

YOUR LOCATION
COARSE (NETWORK-BASED) LOCATION
Google Description: Access coarse location sources such as the cellular network database to determine an approximate tablet location, where available. Malicious apps may use this to determine approximately where you are. Access coarse location sources such as the cellular network database to determine an approximate phone location, where available. Malicious apps may use this to determine approximately where you are.
2X MDM Requirement: Necessary for the device to send periodic Location Tracking Updates using Wireless Networks.

FINE (GPS) LOCATION
Google Description: Access fine location sources such as the Global Positioning System on the tablet, where available. Malicious apps may use this to determine where you are, and may consume additional battery power. Access fine location sources such as the Global Positioning System on the phone, where available. Malicious apps may use this to determine where you are, and may consume additional battery power.
2X MDM Requirement: Necessary for the device to send periodic Location Tracking Updates using GPS Antenna.

YOUR MESSAGES
RECEIVE SMS
Google Description: Allows the app to receive and process SMS messages. Malicious apps may monitor your messages or delete them without showing them to you.
2X MDM Requirement: Remote Lock/Wipe via SMS.

NETWORK COMMUNICATION
FULL INTERNET ACCESS
Google Description: Allows the app to create network sockets.
2X MDM Requirement: Receive 2X MDM Server messages, Application Management and Deployment, Sending of Location Tracking History and Call History.

RECEIVE DATA FROM INTERNET
Google Description: Allows apps to accept cloud to device messages sent by the app's service. Using this service will incur data usage. Malicious apps could cause excess data usage.
2X MDM Requirement: Receive 2X MDM Server messages, Application Management and Deployment, Receive instructions from the 2X MDM Server for: New Settings, Ad-Hoc Location Updates.

VIEW WI-FI STATE
Google Description: Allows the app to view the information about the state of Wi-Fi.
2X MDM Requirement: Client monitors Wi-Fi State to re-initiate its connection to the 2X MDM Server if the Wi-Fi state changes; logging to 2X MDM server the type of network being used for data connectivity.

VIEW NETWORK STATE
Google Description: Allows the app to view the state of all networks.
2X MDM Requirement: Client monitors Network State to re-initiate its connection to the 2X MDM Server if the Network state changes, logging to 2X MDM server the type of network being used for data connectivity.

YOUR PERSONAL INFORMATION
READ CONTACT DATA
Google Description: Allows the app to read all of the contact (address) data stored on your tablet. Malicious apps may use this to send your data to other people. Allows the app to read all of the contact (address) data stored on your phone. Malicious apps may use this to send your data to other people.
2X MDM Requirement: Required to retrieve Call History Information for sending to the 2X MDM Server.

PHONE CALLS
READ PHONE STATE AND IDENTITY
Google Description: Allows the app to access the phone features of the device. An app with this permission can determine the phone number and serial number of this phone, whether a call is active, the number that call is connected to and the like.
2X MDM Requirement: The 2X MDM Server retrieves the devices phone number and serial number for management purposes, viewable in the Device Info tab.

STORAGE
MODIFY/DELETE USB STORAGE CONTENTS MODIFY/DELETE SD CARD CONTENTS
Google Description: Allows the app to write to the USB storage. Allows the app to write to the SD card.
2X MDM Requirement: Saving of 2X MDM Application Settings to an SD Card or to an external USB Storage device; temporary storage for APK Application Deployment.

SYSTEM TOOLS
PREVENT TABLET FROM SLEEPING PREVENT PHONE FROM SLEEPING
Google Description: Allows the app to prevent the tablet from going to sleep. Allows the app to prevent the phone from going to sleep.
2X MDM Requirement: Necessary for the device to send periodic Location Tracking and Call History updates to the 2X MDM Server, and for the device to be reachable for Remote Lock/Wipe functions if it becomes compromised.

AUTOMATICALLY START AT BOOT
Google Description: Allows the app to have itself started as soon as the system has finished booting. This can make it take longer to start the tablet and allow the app to slow down the overall tablet by always running. Allows the app to have itself started as soon as the system has finished booting. This can make it take longer to start the phone and allow the app to slow down the overall phone by always running.
2X MDM Requirement: Necessary for the device to send periodic Location Tracking and Call History updates to the 2X MDM Server, and for the device to be reachable for Remote Lock/Wipe functions if it becomes compromised.

HARDWARE CONTROLS
CONTROL VIBRATOR
Google Description: Allows the app to control the vibrator.
2X MDM Requirement: To alert user of incoming Messages, Application Install/Remove requests and Password Policy change requests.



Leave a Reply