To complete the deployment on mobile endpoints, the end user is required to enable system permissions on their device manually. The user is prompted to make these changes when the Mobile Security for Business app is launched. This article details the system permissions necessary to run the app.
Android and ChromeOS permissions
After installation and activation, the end user must launch the app. A screen displays instructions on changing permissions. Have the end user tap Adjust settings under each item to grant the following system permissions.
Permission | Description |
Storage permission |
Provides access to the file storage to scan for malicious files. |
Keep permissions for unused apps | Retains your device permissions even if the app is not used for a few months. |
Background exclusion required |
Allows the app to monitor for threats and scan your mobile device even if the app is not running. This is required to start scans, services, and show alerts. |
Display over other apps |
Allows the app to display critical alerts. Without this permission, the app cannot notify you of incoming threats or malicious sites. |
Access usage data |
Allows the app to monitor other apps for threats and privacy issues. |
Limit other apps |
Prevents other apps from disabling the Mobile Security for Business app. |
Notifications |
Allows the app to display notifications. |
Accessibility |
This optional permission allows the app to read the user's screen and URLs to identify if they are malicious. |
If the instructions are no longer available in the app, see the following links for manually updating the permissions on Android and ChromeOS:
iOS and iPadOS permissions
After installation and activation, the end user must launch the app. A screen displays instructions on changing permissions. Have the end user go to Settings > Safari > Extensions to grant the following system permissions.
Permission | Description |
Web Protection |
Enables a content blocker to protect Safari browser from malicious and suspicious websites. |
Ad Blocking |
Enables a content blocker to prevent Safari from loading ads and block ad trackers. |
Note: If extensions are grayed out, it may be due to content and privacy restrictions set in Screen Time. Disable Screen Time or allow Unrestricted access for Web Content.
For more information on extensions and Screen Time, see the following articles: