Granting special permissions for fully managed devices?

Hello krishnaylk,

Welcome to the Customer Community, it's nice to meet you. 

I've asked my teammate about this. Unfortunately,  it is not possible to grant permissions directly through AMAPI, especially sensitive permissions like SYSTEM_ALERT_WINDOW. AMAPI focuses on delegated management tasks that prioritize user security and privacy.

Here's a breakdown of why AMAPI restricts permission granting:

Security Focus: Granting app permissions, particularly sensitive ones, requires user awareness and consent. Bypassing this through AMAPI could introduce security vulnerabilities.

Delegated Management: AMAPI offers functionalities for managing aspects like app deployment and security certificates, tasks that benefit from centralized control. Permissions, however, are best handled with user involvement.

Possible alternatives for managing permissions on fully managed devices:

OEMConfig (if available): Some device manufacturers offer OEMConfig tools for advanced configuration. In specific cases, OEMConfig might allow enabling permissions like SYSTEM_ALERT_WINDOW. However, this functionality depends on the manufacturer and may not be widely available.

I hope this helps. To add, regarding AMAPI questions, you might also find this Stakeoverflow forum useful. 

Thanks so much,

Lizzie