1# Open user_grant Permissions 2 3All the permissions in this topic are available to all applications and granted by the user. 4 5This type of permissions must be declared in the application installation package and authorized by the user in a dialog box during the running of the application. The application has the permission only after the user has granted the permission. 6 7<!--Del--> 8> **NOTE** 9> "Enable via ACL" is not involved for permissions of the normal level. 10<!--DelEnd--> 11 12## Request Mode 13 14The [user_grant permissions](app-permission-mgmt-overview.md#user_grant-user-authorization) are permissions granted by users. For details about how to request this type of permissions, see [Declaring Permissions](declare-permissions.md) > [Requesting User Authorization](request-user-authorization.md). 15 16## ohos.permission.ACCESS_BLUETOOTH 17 18Allows an application to access Bluetooth and use Bluetooth capabilities, such as pairing and connecting to peripheral devices. 19 20**Permission level**: normal 21 22**Authorization mode**: user_grant 23 24**Valid since**: 10 25 26## ohos.permission.MEDIA_LOCATION 27 28Allows an application to access geographical locations in the user's media file. 29 30**Permission level**: normal 31 32**Authorization mode**: user_grant 33 34**Valid since**: 7 35 36## ohos.permission.APP_TRACKING_CONSENT 37 38Allows an application to read the open anonymous device identifier (OAID). 39 40**Permission level**: normal 41 42**Authorization mode**: user_grant 43 44**Valid since**: 9 45 46## ohos.permission.ACTIVITY_MOTION 47 48Allows an application to read the current workout status of the user, such as detecting whether the user is working out and recording the number of steps the user has taken. 49 50**Permission level**: normal 51 52**Authorization mode**: user_grant 53 54**Valid since**: 7 55 56## ohos.permission.CAMERA 57 58Allows an application to use the camera. 59 60**Permission level**: normal 61 62**Authorization mode**: user_grant 63 64**Valid since**: 9 65 66## ohos.permission.DISTRIBUTED_DATASYNC 67 68Allows the application data to be exchanged between devices. 69 70**Permission level**: normal 71 72**Authorization mode**: user_grant 73 74**Valid since**: 7 75 76## ohos.permission.LOCATION_IN_BACKGROUND 77 78Allows an application running in the background to obtain the device location. 79 80For security purposes, this permission cannot be granted to applications in a dialog box. If an application needs this permission, direct the user to manually grant this permission on the **Settings** screen. 81 82**Procedure**: 83 841. [Declare permissions](declare-permissions.md) in the **module.json5** file. 85 86 You must request the foreground location permission before requesting the background permission. Therefore, you must declare both the ohos.permission.LOCATION_IN_BACKGROUND permission and the foreground location permission. The foreground location permissions include the following: 87 - Request [ohos.permission.APPROXIMATELY_LOCATION](#ohospermissionapproximately_location). 88 - Request [ohos.permission.APPROXIMATELY_LOCATION](#ohospermissionapproximately_location) and [ohos.permission.LOCATION](#ohospermissionlocation). 892. Request the foreground location permission from the user through a pop-up window. 903. After the user grants the foreground location permissions, display a message to direct the user to go to the **Settings** screen to grant the ohos.permission.LOCATION_IN_BACKGROUND permission. 914. The permission is granted to the application if the user selects **Always allow** on the **Settings** screen. 92 93 Paths: 94 <!--RP1--> 95 - Path 1: **Settings** > **Privacy** > **Permission manager** > **Permissions** > **Location** > *Target application* 96 - Path 2: **Settings** > **Privacy** > **Permission manager** > **Apps** > *Target application* > Location 97 <!--RP1End--> 98 99**Permission level**: normal 100 101**Authorization mode**: user_grant 102 103**Valid since**: 7 104 105## ohos.permission.LOCATION 106 107Allows an application to obtain the device location. 108 109**Prerequisites**: This permission must be requested with [ohos.permission.APPROXIMATELY_LOCATION](#ohospermissionapproximately_location) together. 110 111**Permission level**: normal 112 113**Authorization mode**: user_grant 114 115**Valid since**: 7 116 117## ohos.permission.APPROXIMATELY_LOCATION 118 119Allows an application to obtain the approximate location information of a device. 120 121**Permission level**: normal 122 123**Authorization mode**: user_grant 124 125**Valid since**: 9 126 127## ohos.permission.MICROPHONE 128 129Allows an application to access the microphone. 130 131**Permission level**: normal 132 133**Authorization mode**: user_grant 134 135**Valid since**: 8 136 137## ohos.permission.READ_CALENDAR 138 139Allows an application to read Calendar data. 140 141**Permission level**: normal 142 143**Authorization mode**: user_grant 144 145**Valid since**: 8 146 147## ohos.permission.WRITE_CALENDAR 148 149Allows an application to add, remove, and modify Calendar events. 150 151**Permission level**: normal 152 153**Authorization mode**: user_grant 154 155**Valid since**: 8 156 157## ohos.permission.READ_HEALTH_DATA 158 159Allows an application to read the health data of the user. 160 161**Permission level**: normal 162 163**Authorization mode**: user_grant 164 165**Valid since**: 7 166 167## ohos.permission.ACCESS_NEARLINK 168 169Allows an application to use NearLink, such as device pairing and connecting to nearby devices. 170 171**Permission level**: normal 172 173**Authorization mode**: user_grant 174 175**Valid since**: 12 176 177## ohos.permission.READ_WRITE_DOWNLOAD_DIRECTORY 178 179Allows an application to access the **Download** directory and its subdirectories in the user directory. 180 181Currently, this permission is available only to 2-in-1 device applications. 182 183<!--RP2--><!--RP2End--> 184 185**Permission level**: normal 186 187**Authorization mode**: user_grant 188 189**Valid since**: 11 190 191**Changelog**: The permission level is system_basic in API version 11, and is changed to normal since API version 12. 192 193## ohos.permission.READ_WRITE_DOCUMENTS_DIRECTORY 194 195Allows an application to access the **Documents** directory and its subdirectories in the user directory. 196 197Currently, this permission is available only to 2-in-1 device applications. 198 199<!--RP2--><!--RP2End--> 200 201**Permission level**: normal 202 203**Authorization mode**: user_grant 204 205**Valid since**: 11 206 207**Changelog**: The permission level is system_basic in API version 11, and is changed to normal since API version 12. 208 209## ohos.permission.READ_MEDIA 210 211Allows an application to read media files from the user's external storage. 212 213**Permission level**: normal 214 215**Authorization mode**: user_grant 216 217**Valid since**: 7 218 219**Deprecated from**: 12 220 221**Substitute**: 222 223See the [alternative solution of the **Files** permission group](app-permission-group-list.md#filesdeprecated). 224 225## ohos.permission.WRITE_MEDIA 226 227Allows an application to read media files from and write media files into the user's external storage. 228 229**Permission level**: normal 230 231**Authorization mode**: user_grant 232 233**Valid since**: 7 234 235**Deprecated from**: 12 236 237**Substitute**: 238 239See the [alternative solution of the **Files** permission group](app-permission-group-list.md#filesdeprecated). 240