1# Permissions for System Applications 2 3Before requesting permissions for your application, read and understand the [Workflow for Requesting Permissions](determine-application-mode.md) and this topic to determine the permissions required. 4 5> **NOTE** 6> 7> - The permissions listed in this topic are available to system_basic or system_core applications, but not to normal applications. 8> - However, some of the permissions can be granted to an application of the normal APL via the [Access Control List (ACL)](app-permission-mgmt-overview.md#basic-concepts-in-the-permission-mechanism). 9 10## system_grant Permissions (Requestable via ACL) 11 12The following lists the system_grant permissions that can be requested via the ACL. 13 14For details about the process for requesting permissions, see [Workflow for Requesting Permissions](determine-application-mode.md). 15 16### ohos.permission.PRE_START_ATOMIC_SERVICE 17 18Allows a window to be displayed with animation for an atomic service without the loading dialog box. 19 20**Permission level**: system_core 21 22**Authorization mode**: system_grant 23 24**Enable via ACL**: true 25 26**Valid since**: 12 27 28### ohos.permission.MANAGE_APP_KEEP_ALIVE 29 30Allows a system service to set the keep-alive flag for other applications. 31 32**Permission level**: system_core 33 34**Authorization mode**: system_grant 35 36**Enable via ACL**: true 37 38**Valid since**: 14 39 40### ohos.permission.ACCESS_BBOX_DIR 41 42Allows a system application to access the bbox directory. 43 44**Permission level**: system_basic 45 46**Authorization mode**: system_grant 47 48**Enable via ACL**: true 49 50**Valid since**: 12 51 52### ohos.permission.CONTROL_LOCATION_SWITCH 53 54Allows an application to turn on and off the location service. 55 56**Permission level**: system_core 57 58**Authorization mode**: system_grant 59 60**Enable via ACL**: true 61 62**Valid since**: 12 63 64### ohos.permission.SUBSCRIBE_SWING_ABILITY 65 66Allows an application to use the subscription capability powered by smart sensing. 67 68**Permission level**: system_basic 69 70**Authorization mode**: system_grant 71 72**Enable via ACL**: true 73 74**Valid since**: 12 75 76### ohos.permission.MANAGER_SWING_MOTION 77 78Allows an application to use the air gesture adaptation capability. 79 80**Permission level**: system_basic 81 82**Authorization mode**: system_grant 83 84**Enable via ACL**: true 85 86**Valid since**: 12 87 88### ohos.permission.MOCK_LOCATION 89 90Allows an application to use the mock location function. 91 92**Permission level**: system_basic 93 94**Authorization mode**: system_grant 95 96**Enable via ACL**: true 97 98**Valid since**: 12 99 100### ohos.permission.ACCESS_LEARN_MORE_DIALOG 101 102Allows a system application to display the **Learn more** dialog for detailed information. 103 104**Permission level**: system_basic 105 106**Authorization mode**: system_grant 107 108**Enable via ACL**: true 109 110**Valid since**: 13 111 112### ohos.permission.MANAGE_SETTINGS 113 114Allows an application to set the device-level configuration table and user-level configuration table in **SettingsData**. 115 116**Permission level**: system_basic 117 118**Authorization mode**: system_grant 119 120**Enable via ACL**: true 121 122**Valid since**: 12 123 124### ohos.permission.ACCESS_SCREEN_LOCK 125 126Allow an application to access screen lock and unlock information. 127 128**Permission level**: system_basic 129 130**Authorization mode**: system_grant 131 132**Enable via ACL**: true 133 134**Valid since**: 12 135 136### ohos.permission.SYSTEM_FLOAT_WINDOW 137 138Allows an application to be displayed in a floating window on top of other applications. 139 140**Permission level**: system_basic 141 142**Authorization mode**: system_grant 143 144**Enable via ACL**: true 145 146**Valid since**: 7 147 148### ohos.permission.ALLOW_UPGRADE_GUIDE_ACCESS 149 150Allows a system application to obtain the application upgrade guide or start the application upgrade component. 151 152**Permission level**: system_basic 153 154**Authorization mode**: system_grant 155 156**Enable via ACL**: true 157 158**Valid since**: 12 159 160### ohos.permission.ACCESS_MEDIALIB_THUMB_DB 161 162Allows a system application to access and modify the media library database. 163 164**Permission level**: system_core 165 166**Authorization mode**: system_grant 167 168**Enable via ACL**: true 169 170**Valid since**: 12 171 172### ohos.permission.AGENT_REQUIRE_FORM 173 174Allows the application agent to request widgets. 175 176**Permission level**: system_basic 177 178**Authorization mode**: system_grant 179 180**Enable via ACL**: true 181 182**Valid since**: 11 183 184### ohos.permission.MANAGE_VPN 185 186Allows a system application to enable or disable the VPN function. 187 188**Permission level**: system_basic 189 190**Authorization mode**: system_grant 191 192**Enable via ACL**: false for API versions 10 to 11; true for API version 12 and later 193 194**Valid since**: 10 195 196### ohos.permission.WAKEUP_VISION 197 198Allows an application to access the AI Voice vision component. 199 200**Permission level**: system_basic 201 202**Authorization mode**: system_grant 203 204**Enable via ACL**: true 205 206**Valid since**: 11 207 208### ohos.permission.WAKEUP_VOICE 209 210Allows an application to access the AI Voice wakeup component. 211 212**Permission level**: system_basic 213 214**Authorization mode**: system_grant 215 216**Enable via ACL**: true 217 218**Valid since**: 11 219 220### ohos.permission.ATTEST_KEY 221 222Allows an application to obtain the certificate chain that attests the key validity. 223 224**Permission level**: system_basic 225 226**Authorization mode**: system_grant 227 228**Enable via ACL**: true 229 230**Valid since**: 11 231 232### ohos.permission.GET_PHONE_NUMBERS 233 234Allows an application to obtain the phone numbers of the device. 235 236**Permission level**: system_basic 237 238**Authorization mode**: system_grant 239 240**Enable via ACL**: true 241 242**Valid since**: 10 243 244### ohos.permission.ACTIVATE_THEME_PACKAGE 245 246Allows a system application to set themes, including wallpapers, icons, skins, Always On Display (AOD), and fonts. 247 248**Permission level**: system_basic 249 250**Authorization mode**: system_grant 251 252**Enable via ACL**: true 253 254**Valid since**: 11 255 256### ohos.permission.SET_UNREMOVABLE_NOTIFICATION 257 258Allows an application to publish unremovable notifications. 259 260**Permission level**: system_basic 261 262**Authorization mode**: system_grant 263 264**Enable via ACL**: true 265 266**Valid since**: 11 267 268### ohos.permission.UNINSTALL_BUNDLE 269 270Allows an application to uninstall applications. 271 272**Permission level**: system_core 273 274**Authorization mode**: system_grant 275 276**Enable via ACL**: true 277 278**Valid since**: 10 279 280### ohos.permission.RECOVER_BUNDLE 281 282Allows pre-installed applications to be recovered. 283 284**Permission level**: system_core 285 286**Authorization mode**: system_grant 287 288**Enable via ACL**: true 289 290**Valid since**: 10 291 292### ohos.permission.UPDATE_SYSTEM 293 294Allows an application to call the update APIs. 295 296**Permission level**: system_basic 297 298**Authorization mode**: system_grant 299 300**Enable via ACL**: true 301 302**Valid since**: 8 303 304### ohos.permission.FACTORY_RESET 305 306Allows an application to call the API for restoring factory settings. 307 308**Permission level**: system_basic 309 310**Authorization mode**: system_grant 311 312**Enable via ACL**: true 313 314**Valid since**: 8 315 316### ohos.permission.ASSIST_DEVICE_UPDATE 317 318Allows an application to start the upgrade service to perform assisted or collaborative update for other devices. 319 320**Permission level**: system_basic 321 322**Authorization mode**: system_grant 323 324**Enable via ACL**: true 325 326**Valid since**: 12 327 328### ohos.permission.RECEIVE_UPDATE_MESSAGE 329 330Allows a system application or system ability to listen for the key events occurred in the system update process. 331 332**Permission level**: system_basic 333 334**Authorization mode**: system_grant 335 336**Enable via ACL**: true 337 338**Valid since**: 12 339 340### ohos.permission.GET_ALL_PROCESSES 341 342Allows a system application or system ability to read files in **/proc**. 343 344**Permission level**: system_core 345 346**Authorization mode**: system_grant 347 348**Enable via ACL**: true 349 350**Valid since**: 12 351 352### ohos.permission.MANAGE_LOCAL_ACCOUNTS 353 354Allows an application to manage local accounts. 355 356**Permission level**: system_basic 357 358**Authorization mode**: system_grant 359 360**Enable via ACL**: true 361 362**Valid since**: 7 363 364### ohos.permission.ACCESS_SYSTEM_SETTINGS 365 366Allows an application to access or start **Settings**. 367 368**Permission level**: system_basic 369 370**Authorization mode**: system_grant 371 372**Enable via ACL**: true 373 374**Valid since**: 9 375 376### ohos.permission.SET_ABILITY_CONTROLLER 377 378Allows an application to intercept the startup of the Ability component. This permission is used for testing, such as the stability test. 379 380**Permission level**: system_basic 381 382**Authorization mode**: system_grant 383 384**Enable via ACL**: true 385 386**Valid since**: 9 387 388### ohos.permission.INTERACT_ACROSS_LOCAL_ACCOUNTS_EXTENSION 389 390Allows an application to interact across local accounts. 391 392**Permission level**: system_core 393 394**Authorization mode**: system_grant 395 396**Enable via ACL**: true 397 398**Valid since**: 7 399 400### ohos.permission.CLEAN_APPLICATION_DATA 401 402Allows an application to clear application data. 403 404**Permission level**: system_basic 405 406**Authorization mode**: system_grant 407 408**Enable via ACL**: true 409 410**Valid since**: 7 411 412### ohos.permission.START_ABILITIES_FROM_BACKGROUND 413 414Allows an application to start or access other components from the background. 415 416**Permission level**: system_basic 417 418**Authorization mode**: system_grant 419 420**Enable via ACL**: true 421 422**Valid since**: 9 423 424### ohos.permission.MANAGE_MISSIONS 425 426Allows an application to manage missions in the system. 427 428**Permission level**: system_core 429 430**Authorization mode**: system_grant 431 432**Enable via ACL**: true 433 434**Valid since**: 9 435 436### ohos.permission.MANAGE_ENTERPRISE_DEVICE_ADMIN 437 438Allows an application to activate a device administrator application. 439 440**Permission level**: system_core 441 442**Authorization mode**: system_grant 443 444**Enable via ACL**: true 445 446**Valid since**: 9 447 448### ohos.permission.ENTERPRISE_CONFIG 449 450Allows an application to activate enterprise devices. 451 452**Permission level**: system_basic 453 454**Authorization mode**: system_grant 455 456**Enable via ACL**: true 457 458**Valid since**: 12 459 460### ohos.permission.RECEIVE_ENTERPRISE_POLICY_EVENT 461 462Allows a system application to subscribe to the policy events published by the Enterprise Device Management service. 463 464**Permission level**: system_basic 465 466**Authorization mode**: system_grant 467 468**Enable via ACL**: true 469 470**Valid since**: 14 471 472### ohos.permission.PUBLISH_SYSTEM_COMMON_EVENT 473 474Allows an application to publish system common events. 475 476**Permission level**: system_basic 477 478**Authorization mode**: system_grant 479 480**Enable via ACL**: true 481 482**Valid since**: 10 483 484### ohos.permission.NOTIFICATION_CONTROLLER 485 486Allows an application to manage and subscribe to notifications. 487 488**Permission level**: system_core 489 490**Authorization mode**: system_grant 491 492**Enable via ACL**: true 493 494**Valid since**: 8 495 496### ohos.permission.CLOUDDATA_CONFIG 497 498Allows an application to obtain the device-cloud information of the configuration database. 499 500**Permission level**: system_basic 501 502**Authorization mode**: system_grant 503 504**Enable via ACL**: true 505 506**Valid since**: 10 507 508### ohos.permission.GET_DEFAULT_APPLICATION 509 510Allows an application to query default applications. 511 512**Permission level**: system_core 513 514**Authorization mode**: system_grant 515 516**Enable via ACL**: true 517 518**Valid since**: 9 519 520### ohos.permission.MANAGE_INTELLIGENT_VOICE 521 522Allows an application to access the intelligent voice service interfaces. 523 524**Permission level**: system_basic 525 526**Authorization mode**: system_grant 527 528**Enable via ACL**: true 529 530**Valid since**: 10 531 532### ohos.permission.POWER_MANAGER 533 534Allows an application to hibernate or wake up the device by calling an API. 535 536**Permission level**: system_core 537 538**Authorization mode**: system_grant 539 540**Enable via ACL**: true 541 542**Valid since**: 7 543 544### ohos.permission.GET_SCENE_CODE 545 546Allows an application to obtain the scene code of the specified application. 547 548**Permission level**: system_basic 549 550**Authorization mode**: system_grant 551 552**Enable via ACL**: true 553 554**Valid since**: 10 555 556### ohos.permission.MANAGE_ECOLOGICAL_RULE 557 558Allows the rules for generating the scene code and the matching experience to be set for the manager service. 559 560**Permission level**: system_basic 561 562**Authorization mode**: system_grant 563 564**Enable via ACL**: true 565 566**Valid since**: 10 567 568### ohos.permission.INSTALL_ENTERPRISE_BUNDLE 569 570Allows an application to install enterprise InHouse applications. 571 572**Permission level**: system_core 573 574**Authorization mode**: system_grant 575 576**Enable via ACL**: true 577 578**Valid since**: 10 579 580### ohos.permission.INSTALL_BUNDLE 581 582Allows an application to install and uninstall other applications except enterprise applications, including enterprise InHouse, mobile device management (MDM), and Normal applications. 583 584**Permission level**: system_core 585 586**Authorization mode**: system_grant 587 588**Enable via ACL**: true 589 590**Valid since**: 7 591 592### ohos.permission.MANAGE_SHORTCUTS 593 594Allows an application to query and start shortcuts of other applications. 595 596**Permission level**: system_core 597 598**Authorization mode**: system_grant 599 600**Enable via ACL**: true 601 602**Valid since**: 7 603 604### ohos.permission.OBSERVE_FORM_RUNNING 605 606Allows an application to listen for the card running status. 607 608**Permission level**: system_basic 609 610**Authorization mode**: system_grant 611 612**Enable via ACL**: true 613 614**Valid since**: 10 615 616### ohos.permission.WRITE_HIVIEW_SYSTEM 617 618Allows an application to modify HiView data. 619 620**Permission level**: system_basic 621 622**Authorization mode**: system_grant 623 624**Enable via ACL**: true 625 626**Valid since**: 10 627 628### ohos.permission.READ_HIVIEW_SYSTEM 629 630Allows an application to access HiView data. 631 632**Permission level**: system_basic 633 634**Authorization mode**: system_grant 635 636**Enable via ACL**: true 637 638**Valid since**: 10 639 640### ohos.permission.READ_DFX_SYSEVENT 641 642Allows an application to access system event logging data. 643 644**Permission level**: system_basic 645 646**Authorization mode**: system_grant 647 648**Enable via ACL**: true 649 650**Valid since**: 8 651 652### ohos.permission.READ_DFX_XPOWER 653 654Allows an application to read XPower data. 655 656**Permission level**: system_basic 657 658**Authorization mode**: system_grant 659 660**Enable via ACL**: true 661 662**Valid since**: 12 663 664### ohos.permission.PERMISSION_USED_STATS 665 666Allows a system application to access the permission usage records. 667 668**Permission level**: system_basic 669 670**Authorization mode**: system_grant 671 672**Enable via ACL**: true 673 674**Valid since**: 9 675 676### ohos.permission.CAPTURE_SCREEN 677 678Allows an application to take screenshots. 679 680**Permission level**: system_core 681 682**Authorization mode**: system_grant 683 684**Enable via ACL**: true 685 686**Valid since**: 7 687 688### ohos.permission.ACCESS_CERT_MANAGER_INTERNAL 689 690Allows an application to install, uninstall, and authorize users' public certificate credentials. 691 692**Permission level**: system_basic in API versions 9 to 11 and system_core since API versions 12. 693 694**Authorization mode**: system_grant 695 696**Enable via ACL**: true 697 698**Valid since**: 9 699 700### ohos.permission.CLOUDFILE_SYNC 701 702Allows an application to perform device-cloud synchronization. 703 704**Permission level**: system_basic 705 706**Authorization mode**: system_grant 707 708**Enable via ACL**: true 709 710**Valid since**: 10 711 712### ohos.permission.CHANGE_OVERLAY_ENABLED_STATE 713 714Allows a system application to disable the application with the overlay feature enabled. 715 716**Permission level**: system_basic 717 718**Authorization mode**: system_grant 719 720**Enable via ACL**: true 721 722**Valid since**: 10 723 724### ohos.permission.ACCESS_SCREEN_LOCK_INNER 725 726Allows an application to use the lock screen service to lock the screen, send a screen lock event, and invoke the system event callback. 727 728**Permission level**: system_core 729 730**Authorization mode**: system_grant 731 732**Enable via ACL**: true 733 734**Valid since**: 10 735 736### ohos.permission.BACKUP 737 738Allows an application to use the backup and restore capability. 739 740**Permission level**: system_basic 741 742**Authorization mode**: system_grant 743 744**Enable via ACL**: true 745 746**Valid since**: 9 747 748### ohos.permission.MOUNT_FORMAT_MANAGER 749 750Allows an application to format external cards. 751 752**Permission level**: system_basic 753 754**Authorization mode**: system_grant 755 756**Enable via ACL**: true 757 758**Valid since**: 9 759 760### ohos.permission.MOUNT_UNMOUNT_MANAGER 761 762Allows an application to mount and unmount external cards. 763 764**Permission level**: system_basic 765 766**Authorization mode**: system_grant 767 768**Enable via ACL**: true 769 770**Valid since**: 9 771 772### ohos.permission.PROXY_AUTHORIZATION_URI 773 774Allows the application proxy to authorize the URI. 775 776**Permission level**: system_basic 777 778**Authorization mode**: system_grant 779 780**Enable via ACL**: true 781 782**Valid since**: 10 783 784### ohos.permission.ACCESS_CAST_ENGINE_MIRROR 785 786Allows an application to use the mirror projection capability. 787 788**Permission level**: system_basic 789 790**Authorization mode**: system_grant 791 792**Enable via ACL**: true 793 794**Valid since**: 10 795 796### ohos.permission.ACCESS_CAST_ENGINE_STREAM 797 798Allows an application to invoke the system resource projection capability. 799 800**Permission level**: system_basic 801 802**Authorization mode**: system_grant 803 804**Enable via ACL**: true 805 806**Valid since**: 10 807 808### ohos.permission.INSTALL_ENTERPRISE_NORMAL_BUNDLE 809 810Allows an enterprise normal bundle to be installed on enterprise devices. 811 812**Permission level**: system_core 813 814**Authorization mode**: system_grant 815 816**Enable via ACL**: true 817 818**Valid since**: 10 819 820### ohos.permission.UPDATE_MIGRATE 821 822Allows data migration during the update process. 823 824**Permission level**: system_basic 825 826**Authorization mode**: system_grant 827 828**Enable via ACL**: true 829 830**Valid since**: 10 831 832### ohos.permission.MANAGE_SENSOR 833 834Allows an application that cannot directly use the sensor to turn on and off the sensor. 835 836**Permission level**: system_basic 837 838**Authorization mode**: system_grant 839 840**Enable via ACL**: true 841 842**Valid since**: 10 843 844### ohos.permission.MANAGE_PRINT_JOB 845 846Allows an application to obtain the capability of managing print tasks. 847 848**Permission level**: system_basic 849 850**Authorization mode**: system_grant 851 852**Enable via ACL**: true 853 854**Valid since**: 10 855 856### ohos.permission.securityguard.SET_MODEL_STATE 857 858Allows an application to control the SecurityGuard model switch. 859 860**Permission level**: system_core 861 862**Authorization mode**: system_grant 863 864**Enable via ACL**: true 865 866**Valid since**: 10 867 868### ohos.permission.CAPTURE_VOICE_DOWNLINK_AUDIO 869 870Allows an application to capture the downlink voice audio. 871 872**Permission level**: system_basic 873 874**Authorization mode**: system_grant 875 876**Enable via ACL**: true 877 878**Valid since**: 10 879 880### ohos.permission.GET_WIFI_INFO_INTERNAL 881 882Allows a system process to obtain Wi-Fi parameters. 883 884**Permission level**: system_core 885 886**Authorization mode**: system_grant 887 888**Enable via ACL**: true 889 890**Valid since**: 8 891 892### ohos.permission.ACCESS_BUNDLE_DIR 893 894Allows an application to access the installation directory of another application. 895 896**Permission level**: system_basic 897 898**Authorization mode**: system_grant 899 900**Enable via ACL**: true 901 902**Valid since**: 9 903 904### ohos.permission.CHANGE_ABILITY_ENABLED_STATE 905 906Allows an application to enable or disable an application or component. 907 908**Permission level**: system_basic 909 910**Authorization mode**: system_grant 911 912**Enable via ACL**: true 913 914**Valid since**: 7 915 916### ohos.permission.CLOUDFILE_SYNC_MANAGER 917 918Allows an application to obtain the device-cloud synchronization management capability. 919 920**Permission level**: system_basic 921 922**Authorization mode**: system_grant 923 924**Enable via ACL**: true 925 926**Valid since**: 10 927 928### ohos.permission.DUMP 929 930Allows the basic system information and system ability (SA) information to be dumped. 931 932**Permission level**: system_core 933 934**Authorization mode**: system_grant 935 936**Enable via ACL**: true 937 938**Valid since**: 9 939 940### ohos.permission.DEVICE_STANDBY_EXEMPTION 941 942Allows an application to use resources when the system is in standby mode. 943 944**Permission level**: system_basic 945 946**Authorization mode**: system_grant 947 948**Enable via ACL**: true 949 950**Valid since**: 10 951 952### ohos.permission.PERCEIVE_SMART_POWER_SCENARIO 953 954Allows an application to perceive smart power scenarios. 955 956**Permission level**: system_basic 957 958**Authorization mode**: system_grant 959 960**Enable via ACL**: true 961 962**Valid since**: 12 963 964### ohos.permission.MANAGE_CAMERA_CONFIG 965 966Allows an application to enable or disable cameras globally. 967 968**Permission level**: system_basic 969 970**Authorization mode**: system_grant 971 972**Enable via ACL**: true 973 974**Valid since**: 9 975 976### ohos.permission.MANAGE_AUDIO_CONFIG 977 978Allows an application to mute microphones globally. 979 980**Permission level**: system_basic 981 982**Authorization mode**: system_grant 983 984**Enable via ACL**: true 985 986**Valid since**: 9 987 988### ohos.permission.MICROPHONE_CONTROL 989 990Allows an application to control the microphone, for example, persisting the mute of the microphone globally. 991 992**Permission level**: system_core 993 994**Authorization mode**: system_grant 995 996**Enable via ACL**: true 997 998**Valid since**: 12 999 1000### ohos.permission.START_DLP_CRED 1001 1002Allows a system application or system service to start the DLP credential management application. 1003 1004**Permission level**: system_basic 1005 1006**Authorization mode**: system_grant 1007 1008**Enable via ACL**: true 1009 1010**Valid since**: 12 1011 1012### ohos.permission.START_SHORTCUT 1013 1014Allows an application to start shortcuts. 1015 1016**Permission level**: system_basic 1017 1018**Authorization mode**: system_grant 1019 1020**Enable via ACL**: true 1021 1022**Valid since**: 12 1023 1024### ohos.permission.PRELOAD_UI_EXTENSION_ABILITY 1025 1026Allows an application to preload a UIExtensionAbility instance. 1027 1028**Permission level**: system_basic 1029 1030**Authorization mode**: system_grant 1031 1032**Enable via ACL**: true 1033 1034**Valid since**: 12 1035 1036### ohos.permission.MANAGE_DISPOSED_APP_STATUS 1037 1038Allows an application to set and query the application handling state. 1039 1040**Permission level**: system_core 1041 1042**Authorization mode**: system_grant 1043 1044**Enable via ACL**: true 1045 1046**Valid since**: 9 1047 1048### ohos.permission.GET_DISPOSED_APP_STATUS 1049 1050Allows an application to obtain the disposed application status. 1051 1052**Permission level**: system_basic 1053 1054**Authorization mode**: system_grant 1055 1056**Enable via ACL**: true 1057 1058**Valid since**: 12 1059 1060### ohos.permission.FILE_ACCESS_MANAGER 1061 1062Allows a file management application to access user data files through the FAF. 1063 1064**Permission level**: system_basic 1065 1066**Authorization mode**: system_grant 1067 1068**Enable via ACL**: true 1069 1070**Valid since**: 9 1071 1072### ohos.permission.ACCESS_PUSH_SERVICE 1073 1074Allows an application to access the Ability of the push service. 1075 1076**Permission level**: system_basic 1077 1078**Authorization mode**: system_grant 1079 1080**Enable via ACL**: true 1081 1082**Valid since**: 9 1083 1084### ohos.permission.MANAGE_NET_STRATEGY 1085 1086Allows an application to obtain network strategy information or modify network strategy settings. 1087 1088**Permission level**: system_basic 1089 1090**Authorization mode**: system_grant 1091 1092**Enable via ACL**: true 1093 1094**Valid since**: 10 1095 1096### ohos.permission.INPUT_MONITORING 1097 1098Allows an application to listen for input events. 1099 1100**Permission level**: system_basic 1101 1102**Authorization mode**: system_grant 1103 1104**Enable via ACL**: true 1105 1106**Valid since**: 7 1107 1108**Changelog**: The permission level is **system_core** in API versions 7 to 11 and **system_basic** since API versions 12. 1109 1110### ohos.permission.GET_WIFI_LOCAL_MAC 1111 1112Allows an application to obtain the MAC address of the local Wi-Fi device. 1113 1114**Permission level**: system_basic 1115 1116**Authorization mode**: system_grant 1117 1118**Enable via ACL**: true 1119 1120**Valid since**: 8 1121 1122### ohos.permission.GET_WIFI_PEERS_MAC 1123 1124Allows an application to obtain the MAC address of the peer Wi-Fi device. 1125 1126**Permission level**: system_core 1127 1128**Authorization mode**: system_grant 1129 1130**Enable via ACL**: true 1131 1132**Valid since**: 8 1133 1134### ohos.permission.securityguard.REQUEST_SECURITY_EVENT_INFO 1135 1136Allows an application to obtain detailed security event information. 1137 1138**Permission level**: system_core 1139 1140**Authorization mode**: system_grant 1141 1142**Enable via ACL**: true 1143 1144**Valid since**: 9 1145 1146### ohos.permission.securityguard.REPORT_SECURITY_INFO 1147 1148Allows an application to report security information to Security Guard. 1149 1150**Permission level**: system_basic 1151 1152**Authorization mode**: system_grant 1153 1154**Enable via ACL**: true 1155 1156**Valid since**: 9 1157 1158### ohos.permission.GET_SENSITIVE_PERMISSIONS 1159 1160Allows an application to obtain the sensitive permissions that have been granted to other applications. 1161 1162**Permission level**: system_basic 1163 1164**Authorization mode**: system_grant 1165 1166**Enable via ACL**: true 1167 1168**Valid since**: 8 1169 1170### ohos.permission.ACCESS_SERVICE_DM 1171 1172Allows a system application to obtain the authentication and networking capability of distributed devices. 1173 1174**Permission level**: system_basic 1175 1176**Authorization mode**: system_grant 1177 1178**Enable via ACL**: true 1179 1180**Valid since**: 10 1181 1182### ohos.permission.UPLOAD_SESSION_MANAGER 1183 1184Allows an application to manage the upload sessions. 1185 1186**Permission level**: system_core 1187 1188**Authorization mode**: system_grant 1189 1190**Enable via ACL**: true 1191 1192**Valid since**: 10 1193 1194### ohos.permission.ABILITY_BACKGROUND_COMMUNICATION 1195 1196Allows an application to start the Ability component in the background and establish a connection with it. 1197 1198**Permission level**: system_basic 1199 1200**Authorization mode**: system_grant 1201 1202**Enable via ACL**: true 1203 1204**Valid since**: 9 1205 1206### ohos.permission.ACCESS_DLP_FILE 1207 1208Allows configuration and management of the permissions on .dlp files. 1209 1210**Permission level**: system_core 1211 1212**Authorization mode**: system_grant 1213 1214**Enable via ACL**: true 1215 1216**Valid since**: 9 1217 1218### ohos.permission.ACCESS_IDS 1219 1220Allows an application to query the unique identifier of a device. 1221 1222**Permission level**: system_core 1223 1224**Authorization mode**: system_grant 1225 1226**Enable via ACL**: true 1227 1228**Valid since**: 9 1229 1230### ohos.permission.ACCESS_MISSIONS 1231 1232Allows an application to obtain information about running processes and mission in a mission stack. 1233 1234**Permission level**: system_basic 1235 1236**Authorization mode**: system_grant 1237 1238**Enable via ACL**: true 1239 1240**Valid since**: 7 1241 1242**Deprecated since**: 9 1243 1244### ohos.permission.BUNDLE_ACTIVE_INFO 1245 1246Allows an application to obtain how long other applications have been running in the foreground or background. 1247 1248**Permission level**: system_basic 1249 1250**Authorization mode**: system_grant 1251 1252**Enable via ACL**: true 1253 1254**Valid since**: 7 1255 1256### ohos.permission.CONNECT_IME_ABILITY 1257 1258Allows an application to bind the InputMethodAbility. 1259 1260**Permission level**: system_core 1261 1262**Authorization mode**: system_grant 1263 1264**Enable via ACL**: true 1265 1266**Valid since**: 7 1267 1268### ohos.permission.CONNECT_SCREEN_SAVER_ABILITY 1269 1270Allows an application to bind the ScreenSaverAbility. 1271 1272**Permission level**: system_core 1273 1274**Authorization mode**: system_grant 1275 1276**Enable via ACL**: true 1277 1278**Valid since**: 7 1279 1280### ohos.permission.CONNECTIVITY_INTERNAL 1281 1282Allows an application to obtain network information or modify network settings. Currently, this permission is available only to system applications. 1283 1284**Permission level**: system_basic 1285 1286**Authorization mode**: system_grant 1287 1288**Enable via ACL**: true 1289 1290**Valid since**: 8 1291 1292### ohos.permission.CONTROL_TASK_SYNC_ANIMATOR 1293 1294Allows an application to use sync task animations. 1295 1296**Permission level**: system_core 1297 1298**Authorization mode**: system_grant 1299 1300**Enable via ACL**: true 1301 1302**Valid since**: 7 1303 1304### ohos.permission.DOWNLOAD_SESSION_MANAGER 1305 1306Allows an application to manage the download sessions. 1307 1308**Permission level**: system_core 1309 1310**Authorization mode**: system_grant 1311 1312**Enable via ACL**: true 1313 1314**Valid since**: 7 1315 1316### ohos.permission.GET_DISTRIBUTED_ACCOUNTS 1317 1318Allows an application to obtain information about distributed accounts. 1319 1320**Permission level**: system_basic 1321 1322**Authorization mode**: system_grant 1323 1324**Enable via ACL**: true 1325 1326**Valid since**: 9 1327 1328### ohos.permission.GET_LOCAL_ACCOUNTS 1329 1330Allows an application to obtain information about local accounts. 1331 1332**Permission level**: system_basic 1333 1334**Authorization mode**: system_grant 1335 1336**Enable via ACL**: true 1337 1338**Valid since**: 9 1339 1340### ohos.permission.GET_TELEPHONY_STATE 1341 1342Allows an application to read telephony information. 1343 1344**Permission level**: system_basic 1345 1346**Authorization mode**: system_grant 1347 1348**Enable via ACL**: true 1349 1350**Valid since**: 8 1351 1352### ohos.permission.ACCESS_BOOSTER_SERVICE 1353 1354Allows a system ability or system application to call network booster service APIs, such as APIs for network quality perception, network scenario prediction, and network acceleration. 1355 1356**Permission level**: system_basic 1357 1358**Authorization mode**: system_grant 1359 1360**Enable via ACL**: true 1361 1362**Valid since**: 12 1363 1364### ohos.permission.GET_WALLPAPER 1365 1366Allows an application to read wallpaper files. 1367 1368**Permission level**: system_basic 1369 1370**Authorization mode**: system_grant 1371 1372**Enable via ACL**: true 1373 1374**Valid since**: 7 1375 1376### ohos.permission.GRANT_SENSITIVE_PERMISSIONS 1377 1378Allows an application to grant sensitive permissions to other applications. 1379 1380**Permission level**: system_core 1381 1382**Authorization mode**: system_grant 1383 1384**Enable via ACL**: true 1385 1386**Valid since**: 8 1387 1388### ohos.permission.LAUNCH_DATA_PRIVACY_CENTER 1389 1390Allows an application to switch from its privacy statement page to the **Data & privacy** page. 1391 1392**Permission level**: system_basic 1393 1394**Authorization mode**: system_grant 1395 1396**Enable via ACL**: true 1397 1398**Valid since**: 7 1399 1400### ohos.permission.LISTEN_BUNDLE_CHANGE 1401 1402Allows an application to listen for changes in other applications, when they are installed, updated, or uninstalled. 1403 1404**Permission level**: system_basic 1405 1406**Authorization mode**: system_grant 1407 1408**Enable via ACL**: true 1409 1410**Valid since**: 7 1411 1412### ohos.permission.MANAGE_BLUETOOTH 1413 1414Allows an application to pair with a Bluetooth device and access the Contacts or messages of the device. 1415 1416**Permission level**: system_basic 1417 1418**Authorization mode**: system_grant 1419 1420**Enable via ACL**: true 1421 1422**Valid since**: 7 1423 1424### ohos.permission.MANAGE_DISTRIBUTED_ACCOUNTS 1425 1426Allows an application to manage information about distributed accounts. 1427 1428**Permission level**: system_basic 1429 1430**Authorization mode**: system_grant 1431 1432**Enable via ACL**: true 1433 1434**Valid since**: 9 1435 1436### ohos.permission.MANAGE_MEDIA_RESOURCES 1437 1438Allows an application to obtain and manage the media resources that are being played on the device. 1439 1440**Permission level**: system_basic 1441 1442**Authorization mode**: system_grant 1443 1444**Enable via ACL**: true 1445 1446**Valid since**: 9 1447 1448### ohos.permission.MANAGE_SECURE_SETTINGS 1449 1450Allows an application to modify security settings. 1451 1452**Permission level**: system_basic 1453 1454**Authorization mode**: system_grant 1455 1456**Enable via ACL**: true 1457 1458**Valid since**: 7 1459 1460### ohos.permission.MANAGE_ENTERPRISE_WIFI_CONNECTION 1461 1462Allows an application to manage Wi-Fi connections. 1463 1464**Permission level**: system_basic 1465 1466**Authorization mode**: system_grant 1467 1468**Enable via ACL**: true 1469 1470**Valid since**: 15 1471 1472### ohos.permission.MANAGE_WIFI_CONNECTION 1473 1474Allows an application to manage Wi-Fi connections. 1475 1476**Permission level**: system_core 1477 1478**Authorization mode**: system_grant 1479 1480**Enable via ACL**: true 1481 1482**Valid since**: 8 1483 1484### ohos.permission.MANAGE_WIFI_HOTSPOT 1485 1486Allows an application to enable or disable Wi-Fi hotspots. 1487 1488**Permission level**: system_core 1489 1490**Authorization mode**: system_grant 1491 1492**Enable via ACL**: true 1493 1494**Valid since**: 8 1495 1496### ohos.permission.NOTIFICATION_AGENT_CONTROLLER 1497 1498Allows an application to send agent-powered notifications. 1499 1500**Permission level**: system_core 1501 1502**Authorization mode**: system_grant 1503 1504**Enable via ACL**: true 1505 1506**Valid since**: 9 1507 1508### ohos.permission.PLACE_CALL 1509 1510Allows an application to make calls without starting the dialer. 1511 1512**Permission level**: system_basic 1513 1514**Authorization mode**: system_grant 1515 1516**Enable via ACL**: true 1517 1518**Valid since**: 8 1519 1520### ohos.permission.POWER_OPTIMIZATION 1521 1522Allows an application to set power saving mode, obtain configuration of the power saving mode, and receive notifications of the configuration changes. 1523 1524**Permission level**: system_basic 1525 1526**Authorization mode**: system_grant 1527 1528**Enable via ACL**: true 1529 1530**Valid since**: 7 1531 1532### ohos.permission.PROVISIONING_MESSAGE 1533 1534Allows the Super Device Manager application to be activated. 1535 1536**Permission level**: system_core 1537 1538**Authorization mode**: system_grant 1539 1540**Enable via ACL**: true 1541 1542**Valid since**: 9 1543 1544### ohos.permission.radio.ACCESS_FM_AM 1545 1546Allows an application to access radio services. 1547 1548**Permission level**: system_core 1549 1550**Authorization mode**: system_grant 1551 1552**Enable via ACL**: true 1553 1554**Valid since**: 7 1555 1556### ohos.permission.READ_SCREEN_SAVER 1557 1558Allows an application to read the screen saver information, such as the list of screen savers that have been installed and the activated one. 1559 1560**Permission level**: system_basic 1561 1562**Authorization mode**: system_grant 1563 1564**Enable via ACL**: true 1565 1566**Valid since**: 7 1567 1568### ohos.permission.REBOOT 1569 1570Allows an application to restart the device. 1571 1572**Permission level**: system_basic 1573 1574**Authorization mode**: system_grant 1575 1576**Enable via ACL**: true 1577 1578**Valid since**: 7 1579 1580### ohos.permission.REBOOT_RECOVERY 1581 1582Allows an application to restart the device and enter Recovery mode. 1583 1584**Permission level**: system_basic 1585 1586**Authorization mode**: system_grant 1587 1588**Enable via ACL**: true 1589 1590**Valid since**: 7 1591 1592### ohos.permission.REFRESH_USER_ACTION 1593 1594Allows an application to reset the screen timeout counter when a user input event occurs, such as pressing a key or touching the screen. 1595 1596**Permission level**: system_basic 1597 1598**Authorization mode**: system_grant 1599 1600**Enable via ACL**: true 1601 1602**Valid since**: 7 1603 1604### ohos.permission.REMOVE_CACHE_FILES 1605 1606Allows the cache of the specified application to be cleared. 1607 1608**Permission level**: system_basic 1609 1610**Authorization mode**: system_grant 1611 1612**Enable via ACL**: true 1613 1614**Valid since**: 7 1615 1616### ohos.permission.REQUIRE_FORM 1617 1618Allows an application to obtain the Ability Form. 1619 1620**Permission level**: system_basic 1621 1622**Authorization mode**: system_grant 1623 1624**Enable via ACL**: true 1625 1626**Valid since**: 7 1627 1628### ohos.permission.REVOKE_SENSITIVE_PERMISSIONS 1629 1630Allows an application to revoke the sensitive permissions it has granted to other applications. 1631 1632**Permission level**: system_core 1633 1634**Authorization mode**: system_grant 1635 1636**Enable via ACL**: true 1637 1638**Valid since**: 8 1639 1640### ohos.permission.RUN_ANY_CODE 1641 1642Allows an application to run unsigned code. 1643 1644**Permission level**: system_basic 1645 1646**Authorization mode**: system_grant 1647 1648**Enable via ACL**: true 1649 1650**Valid since**: 10 1651 1652### ohos.permission.sec.ACCESS_UDID 1653 1654Allows an application to obtain the Unified Device ID (UDID). 1655 1656**Permission level**: system_basic 1657 1658**Authorization mode**: system_grant 1659 1660**Enable via ACL**: true 1661 1662**Valid since**: 7 1663 1664### ohos.permission.securityguard.REQUEST_SECURITY_MODEL_RESULT 1665 1666Allows an application to obtain the device risk status. 1667 1668**Permission level**: system_basic 1669 1670**Authorization mode**: system_grant 1671 1672**Enable via ACL**: true 1673 1674**Valid since**: 9 1675 1676### ohos.permission.SET_DEFAULT_APPLICATION 1677 1678Allows an application to set and reset default applications. 1679 1680**Permission level**: system_core 1681 1682**Authorization mode**: system_grant 1683 1684**Enable via ACL**: true 1685 1686**Valid since**: 9 1687 1688### ohos.permission.SET_TELEPHONY_STATE 1689 1690Allows an application to set the telephony state. 1691 1692**Permission level**: system_basic 1693 1694**Authorization mode**: system_grant 1695 1696**Enable via ACL**: true 1697 1698**Valid since**: 8 1699 1700### ohos.permission.SET_TIME 1701 1702Allows an application to set the system time. 1703 1704**Permission level**: system_basic 1705 1706**Authorization mode**: system_grant 1707 1708**Enable via ACL**: true 1709 1710**Valid since**: 7 1711 1712### ohos.permission.SET_TIME_ZONE 1713 1714Allows an application to set the system time zone. 1715 1716**Permission level**: system_basic 1717 1718**Authorization mode**: system_grant 1719 1720**Enable via ACL**: true 1721 1722**Valid since**: 7 1723 1724### ohos.permission.START_ABILIIES_FROM_BACKGROUND 1725 1726Allows an application to start FAs in the background. 1727 1728**Permission level**: system_basic 1729 1730**Authorization mode**: system_grant 1731 1732**Enable via ACL**: true 1733 1734**Valid since**: 7 1735 1736**Deprecated since**: 9 1737 1738### ohos.permission.START_INVISIBLE_ABILITY 1739 1740Allows an application to start an invisible ability. 1741 1742**Permission level**: system_core 1743 1744**Authorization mode**: system_grant 1745 1746**Enable via ACL**: true 1747 1748**Valid since**: 9 1749 1750### ohos.permission.STORAGE_MANAGER 1751 1752Allows an application to call the interfaces of the Storage Manager service to query space statistics and volume information. 1753 1754**Permission level**: system_basic 1755 1756**Authorization mode**: system_grant 1757 1758**Enable via ACL**: true 1759 1760**Valid since**: 9 1761 1762### ohos.permission.UPDATE_CONFIGURATION 1763 1764Allows an application to modify system settings. 1765 1766**Permission level**: system_basic 1767 1768**Authorization mode**: system_grant 1769 1770**Enable via ACL**: true 1771 1772**Valid since**: 7 1773 1774### ohos.permission.WRITE_SCREEN_SAVER 1775 1776Allows an application to modify the screen saver information, such as activating and previewing a screen saver. 1777 1778**Permission level**: system_basic 1779 1780**Authorization mode**: system_grant 1781 1782**Enable via ACL**: true 1783 1784**Valid since**: 7 1785 1786### ohos.permission.GET_BLUETOOTH_LOCAL_MAC 1787 1788Allows an application to obtain the Bluetooth MAC address of the local device. 1789 1790**Permission level**: system_basic 1791 1792**Authorization mode**: system_grant 1793 1794**Enable via ACL**: true 1795 1796**Valid since**: 11 1797 1798### ohos.permission.GET_BLUETOOTH_PEERS_MAC 1799 1800Allows an application to obtain the real Bluetooth MAC address of a device. 1801 1802**Permission level**: system_basic 1803 1804**Authorization mode**: system_grant 1805 1806**Enable via ACL**: true 1807 1808**Valid since**: 12 1809 1810### ohos.permission.USE_USER_IDM 1811 1812Allows an application to access the system identity credential information. 1813 1814**Permission level**: system_basic 1815 1816**Authorization mode**: system_grant 1817 1818**Enable via ACL**: true 1819 1820**Valid since**: 8 1821 1822### ohos.permission.MANAGE_USER_IDM 1823 1824Allows an application to enroll and manage user identity authentication credentials. 1825 1826**Permission level**: system_basic 1827 1828**Authorization mode**: system_grant 1829 1830**Enable via ACL**: true 1831 1832**Valid since**: 8 1833 1834### ohos.permission.ACCESS_PIN_AUTH 1835 1836Allows an application to register the callback for obtaining the PIN during the PIN authentication process. 1837 1838**Permission level**: system_basic 1839 1840**Authorization mode**: system_grant 1841 1842**Enable via ACL**: true 1843 1844**Valid since**: 8 1845 1846### ohos.permission.ACCESS_USER_AUTH_INTERNAL 1847 1848Allows an application to call internal system interfaces of IAM. 1849 1850**Permission level**: system_basic 1851 1852**Authorization mode**: system_grant 1853 1854**Enable via ACL**: true 1855 1856**Valid since**: 8 1857 1858### ohos.permission.SUPPORT_USER_AUTH 1859 1860Allows access to the resource pool of the user authentication widget (auth_widget). 1861 1862**Permission level**: system_basic 1863 1864**Authorization mode**: system_grant 1865 1866**Enable via ACL**: true 1867 1868**Valid since**: 10 1869 1870### ohos.permission.ACCESS_SENSING_WITH_ULTRASOUND 1871 1872Allows an application to use ultrasonic sensing. 1873 1874**Permission level**: system_basic 1875 1876**Authorization mode**: system_grant 1877 1878**Enable via ACL**: true 1879 1880**Valid since**: 10 1881 1882### ohos.permission.ACCESS_DISTRIBUTED_HARDWARE 1883 1884Allows a system service or system application to access distributed hardware resources. 1885 1886**Permission level**: system_basic 1887 1888**Authorization mode**: system_grant 1889 1890**Enable via ACL**: true 1891 1892**Valid since**: 11 1893 1894### ohos.permission.INSTANTSHARE_SWITCH_CONTROL 1895 1896Allows a system service or system application to change the **instantshare** switch state. 1897 1898**Permission level**: system_basic 1899 1900**Authorization mode**: system_grant 1901 1902**Enable via ACL**: true 1903 1904**Valid since**: 11 1905 1906### ohos.permission.ACCESS_INSTANTSHARE_SERVICE 1907 1908Allows a system service or system application to access the **instantshare** service. 1909 1910**Permission level**: system_basic 1911 1912**Authorization mode**: system_grant 1913 1914**Enable via ACL**: true 1915 1916**Valid since**: 11 1917 1918### ohos.permission.ACCESS_INSTANTSHARE_PRIVATE_ABILITY 1919 1920Allows a system service or system application to use the **instantshare** private ability. 1921 1922**Permission level**: system_basic 1923 1924**Authorization mode**: system_grant 1925 1926**Enable via ACL**: true 1927 1928**Valid since**: 11 1929 1930### ohos.permission.ACCESS_MCP_AUTHORIZATION 1931 1932Allows the MCP host application to perform user account authorization and login for its sub-applications. 1933 1934**Permission level**: system_basic 1935 1936**Authorization mode**: system_grant 1937 1938**Enable via ACL**: true 1939 1940**Valid since**: 11 1941 1942### ohos.permission.GET_BUNDLE_RESOURCES 1943 1944Allows an application to obtain resource information of another application. 1945 1946**Permission level**: system_basic 1947 1948**Authorization mode**: system_grant 1949 1950**Enable via ACL**: true 1951 1952**Valid since**: 11 1953 1954### ohos.permission.COOPERATE_MANAGER 1955 1956Allows a system application to enable the ScreenHop feature, which allows the user to use a mouse across multiple devices. 1957 1958**Permission level**: system_basic 1959 1960**Authorization mode**: system_grant 1961 1962**Enable via ACL**: true 1963 1964**Valid since**: 11 1965 1966### ohos.permission.PERCEIVE_TRAIL 1967 1968Allows a system application to use the Multimodal Sensor Data Platform (MSDP) trail perception function. 1969 1970**Permission level**: system_basic 1971 1972**Authorization mode**: system_grant 1973 1974**Enable via ACL**: true 1975 1976**Valid since**: 11 1977 1978### ohos.permission.EXECUTE_INSIGHT_INTENT 1979 1980Allows a system application to execute intent calls. 1981 1982**Permission level**: system_basic 1983 1984**Authorization mode**: system_grant 1985 1986**Enable via ACL**: true 1987 1988**Valid since**: 11 1989 1990### ohos.permission.VERIFY_ACTIVATION_LOCK 1991 1992Allows an application to verify the validity of activation lock credentials. 1993 1994**Permission level**: system_basic 1995 1996**Authorization mode**: system_grant 1997 1998**Enable via ACL**: true 1999 2000**Valid since**: 11 2001 2002### ohos.permission.ACCESS_OUC 2003 2004Allows a system application to start the software update capability. 2005 2006**Permission level**: system_basic 2007 2008**Authorization mode**: system_grant 2009 2010**Enable via ACL**: true 2011 2012**Valid since**: 11 2013 2014### ohos.permission.MANAGE_FINGERPRINT_AUTH 2015 2016Allows an application to call APIs for configuring and managing the fingerprint authentication module. 2017 2018**Permission level**: system_basic 2019 2020**Authorization mode**: system_grant 2021 2022**Enable via ACL**: true 2023 2024**Valid since**: 11 2025 2026### ohos.permission.TRUSTED_RING_HASH_DATA_PERMISSION 2027 2028Allows an application to send data to the trusted ring of critical assets. 2029 2030**Permission level**: system_basic 2031 2032**Authorization mode**: system_grant 2033 2034**Enable via ACL**: true 2035 2036**Valid since**: 11 2037 2038### ohos.permission.INPUT_CONTROL_DISPATCHING 2039 2040Allows a system application to shield the shortcut key distribution logic. 2041 2042**Permission level**: system_basic 2043 2044**Authorization mode**: system_grant 2045 2046**Enable via ACL**: true 2047 2048**Valid since**: 11 2049 2050### ohos.permission.MANAGE_TRUSTED_RING 2051 2052Allows the use of the capabilities provided by the critical asset trusted ring service. 2053 2054**Permission level**: system_basic 2055 2056**Authorization mode**: system_grant 2057 2058**Enable via ACL**: true 2059 2060**Valid since**: 11 2061 2062### ohos.permission.USE_TRUSTED_RING 2063 2064Allows an applications or service to use the critical asset trusted ring. 2065 2066**Permission level**: system_basic 2067 2068**Authorization mode**: system_grant 2069 2070**Enable via ACL**: true 2071 2072**Valid since**: 11 2073 2074### ohos.permission.RECEIVE_APP_INSTALL_INFO_CHANGE 2075 2076Allows an application to listen for the installation progress of other applications. 2077 2078**Permission level**: system_basic 2079 2080**Authorization mode**: system_grant 2081 2082**Enable via ACL**: true 2083 2084**Valid since**: 11 2085 2086### ohos.permission.LAUNCH_SPAMSHIELD_PAGE 2087 2088Allows an application to access the shielded spam pages. 2089 2090**Permission level**: system_basic 2091 2092**Authorization mode**: system_grant 2093 2094**Enable via ACL**: true 2095 2096**Valid since**: 12 2097 2098### ohos.permission.ACCESS_SPAMSHIELD_SERVICE 2099 2100Allows an application to access the spam shield service. 2101 2102**Permission level**: system_basic 2103 2104**Authorization mode**: system_grant 2105 2106**Enable via ACL**: true 2107 2108**Valid since**: 12 2109 2110### ohos.permission.ACCESS_SECURITY_PRIVACY_CENTER 2111 2112Allows a service to access the Security & Privacy Center. 2113 2114**Permission level**: system_basic 2115 2116**Authorization mode**: system_grant 2117 2118**Enable via ACL**: true 2119 2120**Valid since**: 11 2121 2122### ohos.permission.GET_SECURITY_PRIVACY_ADVICE 2123 2124Allows a system application to obtain advice from the Security & Privacy Center. 2125 2126**Permission level**: system_core 2127 2128**Authorization mode**: system_grant 2129 2130**Enable via ACL**: true 2131 2132**Valid since**: 11 2133 2134### ohos.permission.SET_SECURITY_PRIVACY_ADVICE 2135 2136Allows a system application to process the advice provided by the Security & Privacy Center. 2137 2138**Permission level**: system_core 2139 2140**Authorization mode**: system_grant 2141 2142**Enable via ACL**: true 2143 2144**Valid since**: 11 2145 2146### ohos.permission.USE_SECURITY_PRIVACY_MESSAGER 2147 2148Allows a system service to call permission management interfaces. 2149 2150**Permission level**: system_core 2151 2152**Authorization mode**: system_grant 2153 2154**Enable via ACL**: true 2155 2156**Valid since**: 11 2157 2158### ohos.permission.GET_PRIVACY_INDICATOR 2159 2160Allows a system application to obtain details about privacy event notifications. 2161 2162**Permission level**: system_basic 2163 2164**Authorization mode**: system_grant 2165 2166**Enable via ACL**: true 2167 2168**Valid since**: 12 2169 2170### ohos.permission.SET_PRIVACY_INDICATOR 2171 2172Allows a system application to control the presence status of privacy event notifications. 2173 2174**Permission level**: system_core 2175 2176**Authorization mode**: system_grant 2177 2178**Enable via ACL**: true 2179 2180**Valid since**: 12 2181 2182### ohos.permission.EXEMPT_PRIVACY_INDICATOR 2183 2184Allows an application to use permissions without displaying the privacy indicator. 2185 2186**Permission level**: system_core 2187 2188**Authorization mode**: system_grant 2189 2190**Enable via ACL**: true 2191 2192**Valid since**: 12 2193 2194### ohos.permission.EXEMPT_CAMERA_PRIVACY_INDICATOR 2195 2196Allows an application to access the device's camera without displaying the privacy indicator. 2197 2198**Permission level**: system_core 2199 2200**Authorization mode**: system_grant 2201 2202**Enable via ACL**: true 2203 2204**Valid since**: 12 2205 2206### ohos.permission.EXEMPT_MICROPHONE_PRIVACY_INDICATOR 2207 2208Allows an application to access the device's microphone without displaying the privacy indicator. 2209 2210**Permission level**: system_core 2211 2212**Authorization mode**: system_grant 2213 2214**Enable via ACL**: true 2215 2216**Valid since**: 12 2217 2218### ohos.permission.EXEMPT_LOCATION_PRIVACY_INDICATOR 2219 2220Allows an application to use the location service without displaying the privacy indicator. 2221 2222**Permission level**: system_core 2223 2224**Authorization mode**: system_grant 2225 2226**Enable via ACL**: true 2227 2228**Valid since**: 12 2229 2230### ohos.permission.EXEMPT_PRIVACY_SECURITY_CENTER 2231 2232Allows a system application to be hidden on the **Privacy & Security** page. 2233 2234**Permission level**: system_core 2235 2236**Authorization mode**: system_grant 2237 2238**Enable via ACL**: true 2239 2240**Valid since**: 13 2241 2242### ohos.permission.GET_SUPER_PRIVACY 2243 2244Allows a system application to obtain the status of the super privacy mode. 2245 2246**Permission level**: system_basic 2247 2248**Authorization mode**: system_grant 2249 2250**Enable via ACL**: true 2251 2252**Valid since**: 12 2253 2254### ohos.permission.SET_SUPER_PRIVACY 2255 2256Allows a system application to set the super privacy mode. 2257 2258**Permission level**: system_core 2259 2260**Authorization mode**: system_grant 2261 2262**Enable via ACL**: true 2263 2264**Valid since**: 12 2265 2266### ohos.permission.ACCESS_PRIVATE_SPACE_MANAGER 2267 2268Allows a system application or system service to start the PrivateSpace manager. 2269 2270**Permission level**: system_basic 2271 2272**Authorization mode**: system_grant 2273 2274**Enable via ACL**: true 2275 2276**Valid since**: 12 2277 2278### ohos.permission.ACCESS_PRIVATE_SPACE_PASSWORD_PROTECT 2279 2280Allows a system application to call PrivateSpace APIs related to password protection. 2281 2282**Permission level**: system_basic 2283 2284**Authorization mode**: system_grant 2285 2286**Enable via ACL**: true 2287 2288**Valid since**: 12 2289 2290### ohos.permission.ACCESS_PASSWORDVAULT_ABILITY 2291 2292Allows a system application or system service to start the Password Vault ability. 2293 2294**Permission level**: system_basic 2295 2296**Authorization mode**: system_grant 2297 2298**Enable via ACL**: true 2299 2300**Valid since**: 11 2301 2302### ohos.permission.ACCESS_TEXTAUTOFILL_ABILITY 2303 2304Allows a system application or system service to start the text autofill ability. 2305 2306**Permission level**: system_basic 2307 2308**Authorization mode**: system_grant 2309 2310**Enable via ACL**: true 2311 2312**Valid since**: 12 2313 2314### ohos.permission.ACCESS_LOWPOWER_MANAGER 2315 2316Allows a system application or system service to send messages to LowpowerManager. 2317 2318**Permission level**: system_basic 2319 2320**Authorization mode**: system_grant 2321 2322**Enable via ACL**: true 2323 2324**Valid since**: 11 2325 2326### ohos.permission.MANAGE_APP_BOOT 2327 2328Allows a system application to set auto boot options for other applications. 2329 2330**Permission level**: system_basic 2331 2332**Authorization mode**: system_grant 2333 2334**Enable via ACL**: true 2335 2336**Valid since**: 11 2337 2338### ohos.permission.ACCESS_DDK_HID 2339 2340Allows extended peripheral drivers to access the HID DDK interfaces to implement development of HID extended peripheral drivers. 2341 2342**Permission level**: system_basic 2343 2344**Authorization mode**: system_grant 2345 2346**Enable via ACL**: true 2347 2348**Valid since**: 11 2349 2350### ohos.permission.ACCESS_DDK_USB 2351 2352Allows extended peripheral drivers to access the USB DDK interfaces to implement development of USB extended peripheral drivers. 2353 2354**Permission level**: system_basic 2355 2356**Authorization mode**: system_grant 2357 2358**Enable via ACL**: true 2359 2360**Valid since**: 11 2361 2362### ohos.permission.ACCESS_ACCOUNT_KIT_SERVICE 2363 2364Allows the account service to query and modify account data. 2365 2366**Permission level**: system_basic 2367 2368**Authorization mode**: system_grant 2369 2370**Enable via ACL**: true 2371 2372**Valid since**: 11 2373 2374### ohos.permission.REQUEST_ANONYMOUS_ATTEST 2375 2376Allows a system application to use the device anonymous attestation capability. 2377 2378**Permission level**: system_basic 2379 2380**Authorization mode**: system_grant 2381 2382**Enable via ACL**: true 2383 2384**Valid since**: 11 2385 2386### ohos.permission.ACCESS_ACCOUNT_KIT_UI 2387 2388Allows a system application to display the account user authentication page. 2389 2390**Permission level**: system_basic 2391 2392**Authorization mode**: system_grant 2393 2394**Enable via ACL**: true 2395 2396**Valid since**: 11 2397 2398### ohos.permission.START_RECENT_ABILITY 2399 2400Allows an application to start the specified UIAbility or the last started instance if the UIAbility has multiple instances. 2401 2402**Permission level**: system_basic 2403 2404**Authorization mode**: system_grant 2405 2406**Enable via ACL**: true 2407 2408**Valid since**: 11 2409 2410### ohos.permission.MANAGE_CLOUD_SYNC_CONFIG 2411 2412Allows an application that has accessed the cloud to manage the device-cloud sync configuration. 2413 2414**Permission level**: system_basic 2415 2416**Authorization mode**: system_grant 2417 2418**Enable via ACL**: true 2419 2420**Valid since**: 11 2421 2422### ohos.permission.ACCESS_FINDDEVICE 2423 2424Allows an application to start the **Find Device** app. 2425 2426**Permission level**: system_basic 2427 2428**Authorization mode**: system_grant 2429 2430**Enable via ACL**: true 2431 2432**Valid since**: 11 2433 2434### ohos.permission.MANAGE_FINDSERVICE 2435 2436Allows a system application to obtain and modify the setting of **Find My Phone**. 2437 2438**Permission level**: system_basic 2439 2440**Authorization mode**: system_grant 2441 2442**Enable via ACL**: true 2443 2444**Valid since**: 11 2445 2446### ohos.permission.READ_FINDSERVICE 2447 2448Allows a system application to read the status of **Find Device**. 2449 2450**Permission level**: system_basic 2451 2452**Authorization mode**: system_grant 2453 2454**Enable via ACL**: true 2455 2456**Valid since**: 12 2457 2458### ohos.permission.MANAGE_USB_CONFIG 2459 2460Allows an application to manage the USB device functions and ports. 2461 2462**Permission level**: system_basic 2463 2464**Authorization mode**: system_grant 2465 2466**Enable via ACL**: true 2467 2468**Valid since**: 11 2469 2470### ohos.permission.START_SYSTEM_DIALOG 2471 2472Allows an application to start modal system dialog boxes. 2473 2474**Permission level**: system_basic 2475 2476**Authorization mode**: system_grant 2477 2478**Enable via ACL**: true 2479 2480**Valid since**: 11 2481 2482### ohos.permission.ACCESS_STATUSBAR_ICON 2483 2484Allows an application to access the status bar icons. 2485 2486**Permission level**: system_basic 2487 2488**Authorization mode**: system_grant 2489 2490**Enable via ACL**: true 2491 2492**Valid since**: 11 2493 2494### ohos.permission.MANAGE_SYSTEM_AUDIO_EFFECTS 2495 2496Allows an application to manage the system audio effects. 2497 2498**Permission level**: system_basic 2499 2500**Authorization mode**: system_grant 2501 2502**Enable via ACL**: true 2503 2504**Valid since**: 11 2505 2506### ohos.permission.SECURE_PASTE 2507 2508Allows an application to read the pasteboard via silent access. 2509 2510**Permission level**: system_core 2511 2512**Authorization mode**: system_grant 2513 2514**Enable via ACL**: true 2515 2516**Valid since**: 11 2517 2518### ohos.permission.SET_CODE_PROTECT_INFO 2519 2520Allows a system application to set the public key and working secret ciphertext in the cloud and agrees on a key for code protection. 2521 2522**Permission level**: system_core 2523 2524**Authorization mode**: system_grant 2525 2526**Enable via ACL**: true 2527 2528**Valid since**: 11 2529 2530### ohos.permission.SET_ADVANCED_SECURITY_MODE 2531 2532Allows an application to set the advanced security mode configuration. 2533 2534**Permission level**: system_core 2535 2536**Authorization mode**: system_grant 2537 2538**Enable via ACL**: true 2539 2540**Valid since**: 11 2541 2542### ohos.permission.SET_DEVELOPER_MODE 2543 2544Allows an application to set the developer mode configuration. 2545 2546**Permission level**: system_core 2547 2548**Authorization mode**: system_grant 2549 2550**Enable via ACL**: true 2551 2552**Valid since**: 11 2553 2554### ohos.permission.DISABLE_PERMISSION_DIALOG 2555 2556Allows a system application to set whether an application can start the permission dialog box. 2557 2558**Permission level**: system_core 2559 2560**Authorization mode**: system_grant 2561 2562**Enable via ACL**: true 2563 2564**Valid since**: 11 2565 2566### ohos.permission.MANAGE_ACTIVATION_LOCK 2567 2568Allows an application to manage the activation lock of a device. 2569 2570**Permission level**: system_basic 2571 2572**Authorization mode**: system_grant 2573 2574**Enable via ACL**: true 2575 2576**Valid since**: 11 2577 2578### ohos.permission.MANAGE_PRIVATE_PHOTOS 2579 2580Allows an application to access the built-in hidden albums and files in the albums. 2581 2582**Permission level**: system_core 2583 2584**Authorization mode**: system_grant 2585 2586**Enable via ACL**: true 2587 2588**Valid since**: 11 2589 2590### ohos.permission.INTERCEPT_INPUT_EVENT 2591 2592Allows an application to intercept input events. 2593 2594**Permission level**: system_basic 2595 2596**Authorization mode**: system_grant 2597 2598**Enable via ACL**: true 2599 2600**Valid since**: 11 2601 2602**Changelog**: The permission level is **system_core** in API version 11 and **system_basic** since API versions 12. 2603 2604### ohos.permission.RECORD_VOICE_CALL 2605 2606Allows an application to record voice calls. 2607 2608**Permission level**: system_core 2609 2610**Authorization mode**: system_grant 2611 2612**Enable via ACL**: true 2613 2614**Valid since**: 11 2615 2616### ohos.permission.MANAGE_APP_INSTALL_INFO 2617 2618Allows an application to create and manage application installation tasks. 2619 2620**Permission level**: system_core 2621 2622**Authorization mode**: system_grant 2623 2624**Enable via ACL**: true 2625 2626**Valid since**: 11 2627 2628### ohos.permission.ACCESS_ADVANCED_SECURITY_MODE 2629 2630Allows a system application to access the advanced security mode configuration page. 2631 2632**Permission level**: system_basic 2633 2634**Authorization mode**: system_grant 2635 2636**Enable via ACL**: true 2637 2638**Valid since**: 11 2639 2640### ohos.permission.ACCESS_HIVIEWX 2641 2642Allows a system application to start HiViewX, which displays the **User Experience Improvement Program** page. 2643 2644**Permission level**: system_basic 2645 2646**Authorization mode**: system_grant 2647 2648**Enable via ACL**: true 2649 2650**Valid since**: 11 2651 2652### ohos.permission.ACCESS_HIVIEWCARE 2653 2654Allows a system application to start HiViewCare. 2655 2656**Permission level**: system_basic 2657 2658**Authorization mode**: system_grant 2659 2660**Enable via ACL**: true 2661 2662**Valid since**: 11 2663 2664### ohos.permission.CONNECT_UI_EXTENSION_ABILITY 2665 2666Allows a system service to connect to UIExtensionAbility. 2667 2668**Permission level**: system_core 2669 2670**Authorization mode**: system_grant 2671 2672**Enable via ACL**: true 2673 2674**Valid since**: 11 2675 2676### ohos.permission.SET_SANDBOX_POLICY 2677 2678Allows a system application to set dynamic sandbox policies. 2679 2680**Permission level**: system_core 2681 2682**Authorization mode**: system_grant 2683 2684**Enable via ACL**: true 2685 2686**Valid since**: 11 2687 2688### ohos.permission.CHECK_SANDBOX_POLICY 2689 2690Allows a system application or system service to check sandbox policies of other applications. 2691 2692**Permission level**: system_basic 2693 2694**Authorization mode**: system_grant 2695 2696**Enable via ACL**: true 2697 2698**Valid since**: 15 2699 2700### ohos.permission.TRIGGER_ACTIVATIONLOCK 2701 2702Allows an SA to call **Find Device**. 2703 2704**Permission level**: system_core 2705 2706**Authorization mode**: system_grant 2707 2708**Enable via ACL**: true 2709 2710**Valid since**: 11 2711 2712### ohos.permission.WRITE_PRIVACY_PUSH_DATA 2713 2714Allows an application to write private Push data to another application. 2715 2716**Permission level**: system_core 2717 2718**Authorization mode**: system_grant 2719 2720**Enable via ACL**: true 2721 2722**Valid since**: 11 2723 2724### ohos.permission.READ_PRIVACY_PUSH_DATA 2725 2726Allows an application to read the private Push data of another application. 2727 2728**Permission level**: system_core 2729 2730**Authorization mode**: system_grant 2731 2732**Enable via ACL**: true 2733 2734**Valid since**: 12 2735 2736### ohos.permission.MANAGE_NEARLINK 2737 2738Allows an application to pair with a NearLink device and access the Contacts or messages of the device. 2739 2740**Permission level**: system_basic 2741 2742**Authorization mode**: system_grant 2743 2744**Enable via ACL**: true 2745 2746**Valid since**: 12 2747 2748### ohos.permission.GET_NEARLINK_LOCAL_MAC 2749 2750Allows an application to obtain the NearLink MAC address of the local device. 2751 2752**Permission level**: system_basic 2753 2754**Authorization mode**: system_grant 2755 2756**Enable via ACL**: true 2757 2758**Valid since**: 12 2759 2760### ohos.permission.GET_NEARLINK_PEER_MAC 2761 2762Allows an application to obtain the NearLink MAC address of the peer device. 2763 2764**Permission level**: system_basic 2765 2766**Authorization mode**: system_grant 2767 2768**Enable via ACL**: true 2769 2770**Valid since**: 12 2771 2772### ohos.permission.MANAGE_UWB 2773 2774Allows a system application to manage the ultra-wideband (UWB) function, 2775 2776for example, enabling or disabling UWB communication, querying the chip type, and querying UWB capabilities. 2777 2778**Permission level**: system_basic 2779 2780**Authorization mode**: system_grant 2781 2782**Enable via ACL**: true 2783 2784**Valid since**: 12 2785 2786### ohos.permission.USE_UWB_RANGING 2787 2788Allows a system application to use UWB ranging, 2789 2790for example, opening a session for UWB ranging, starting ranging, stoping ranging, and closing a session. 2791 2792**Permission level**: system_basic 2793 2794**Authorization mode**: system_grant 2795 2796**Enable via ACL**: true 2797 2798**Valid since**: 12 2799 2800### ohos.permission.MANAGE_FINDNETWORK 2801 2802Allows an application to manage the **Find Network** switch and pair and unpair accessories. 2803 2804**Permission level**: system_basic 2805 2806**Authorization mode**: system_grant 2807 2808**Enable via ACL**: true 2809 2810**Valid since**: 12 2811 2812### ohos.permission.OPERATE_FINDNETWORK 2813 2814Allows an application to call APIs for finding network. 2815 2816**Permission level**: system_basic 2817 2818**Authorization mode**: system_grant 2819 2820**Enable via ACL**: true 2821 2822**Valid since**: 12 2823 2824### ohos.permission.QUERY_FINDNETWORK_LOCATION 2825 2826Allows an application to query the location of an offline device. 2827 2828**Permission level**: system_basic 2829 2830**Authorization mode**: system_grant 2831 2832**Enable via ACL**: true 2833 2834**Valid since**: 12 2835 2836### ohos.permission.REGISTER_FINDNETWORK_ACCESSORY 2837 2838Allows an application or system ability to initiate the process for registering the Find Network accessories. 2839 2840**Permission level**: system_basic 2841 2842**Authorization mode**: system_grant 2843 2844**Enable via ACL**: true 2845 2846**Valid since**: 13 2847 2848### ohos.permission.MANAGE_RGM 2849 2850Allows a system service or system application to manage RGM. 2851 2852**Permission level**: system_core 2853 2854**Authorization mode**: system_grant 2855 2856**Enable via ACL**: true 2857 2858**Valid since**: 12 2859 2860### ohos.permission.ACCESS_PROTOCOL_DFX_DATA 2861 2862Allows a system application to access communication failure information and system statistics. 2863 2864**Permission level**: system_basic 2865 2866**Authorization mode**: system_grant 2867 2868**Enable via ACL**: true 2869 2870**Valid since**: 12 2871 2872### ohos.permission.ACCESS_PROTOCOL_DFX_STATE 2873 2874Allows a system application to enable or disable the switches related to communication protocols. 2875 2876**Permission level**: system_basic 2877 2878**Authorization mode**: system_grant 2879 2880**Enable via ACL**: true 2881 2882**Valid since**: 12 2883 2884### ohos.permission.ACCESS_CMAP_SERVICE 2885 2886Allows a system application to access the cellular map service. 2887 2888**Permission level**: system_basic 2889 2890**Authorization mode**: system_grant 2891 2892**Enable via ACL**: true 2893 2894**Valid since**: 14 2895 2896### ohos.permission.MANAGE_USER_ACCOUNT_INFO 2897 2898Allows a system application or an SA to call the account service. 2899 2900**Permission level**: system_core 2901 2902**Authorization mode**: system_grant 2903 2904**Enable via ACL**: true 2905 2906**Valid since**: 12 2907 2908### ohos.permission.ALLOW_TIPS_ACCESS 2909 2910Allows a system application to start the exposed components of another system application. 2911 2912**Permission level**: system_basic 2913 2914**Authorization mode**: system_grant 2915 2916**Enable via ACL**: true 2917 2918**Valid since**: 12 2919 2920### ohos.permission.ACCESS_AI_ABILITY 2921 2922Allows a system application or an SA to access the AI ability. 2923 2924**Permission level**: system_basic 2925 2926**Authorization mode**: system_grant 2927 2928**Enable via ACL**: true 2929 2930**Valid since**: 12 2931 2932### ohos.permission.READ_HEALTH_MOTION 2933 2934Allows a system application to read the activity ring information, such as the step count. 2935 2936**Permission level**: system_basic 2937 2938**Authorization mode**: system_grant 2939 2940**Enable via ACL**: true 2941 2942**Valid since**: 12 2943 2944### ohos.permission.hsdr.REQUEST_HSDR 2945 2946Allows a system application to access the OpenHarmony Security Detection and Response (HSDR) function of querying the security policies from the cloud. 2947 2948**Permission level**: system_basic 2949 2950**Authorization mode**: system_grant 2951 2952**Enable via ACL**: true 2953 2954**Valid since**: 12 2955 2956### ohos.permission.WRITE_GTOKEN_POLICY 2957 2958Allows a system application to write application control policies. 2959 2960**Permission level**: system_core 2961 2962**Authorization mode**: system_grant 2963 2964**Enable via ACL**: true 2965 2966**Valid since**: 12 2967 2968### ohos.permission.READ_GTOKEN_POLICY 2969 2970Allows a system application to read application control policies. 2971 2972**Permission level**: system_basic 2973 2974**Authorization mode**: system_grant 2975 2976**Enable via ACL**: true 2977 2978**Valid since**: 12 2979 2980### ohos.permission.NOTIFY_DEBUG_ASSERT_RESULT 2981 2982Allows a system application to set the assertion debugging result. 2983 2984**Permission level**: system_basic 2985 2986**Authorization mode**: system_grant 2987 2988**Enable via ACL**: true 2989 2990**Valid since**: 12 2991 2992### ohos.permission.QUERY_PASSWORD_VAULT_DATA 2993 2994Allows a system application to obtain password vault data. 2995 2996**Permission level**: system_basic 2997 2998**Authorization mode**: system_grant 2999 3000**Enable via ACL**: true 3001 3002**Valid since**: 12 3003 3004### ohos.permission.WRITE_ACCOUNT_LOGIN_STATE 3005 3006Allows user account login status to be written to the data management service. 3007 3008**Permission level**: system_basic 3009 3010**Authorization mode**: system_grant 3011 3012**Enable via ACL**: true 3013 3014**Valid since**: 12 3015 3016### ohos.permission.INTERACT_ACROSS_LOCAL_ACCOUNTS_AS_USER 3017 3018Allows a service in the U0 user space to call the account APIs opened. 3019 3020**Permission level**: system_core 3021 3022**Authorization mode**: system_grant 3023 3024**Enable via ACL**: true 3025 3026**Valid since**: 12 3027 3028### ohos.permission.SUBSCRIBE_NOTIFICATION_WINDOW_STATE 3029 3030Allows an application to subscribe to the broadcasts sent when the notification window is displayed or collapsed. 3031 3032**Permission level**: system_basic 3033 3034**Authorization mode**: system_grant 3035 3036**Enable via ACL**: true 3037 3038**Valid since**: 12 3039 3040### ohos.permission.CHANGE_DISPLAYMODE 3041 3042Allows a system application to change the display mode. 3043 3044**Permission level**: system_core 3045 3046**Authorization mode**: system_grant 3047 3048**Enable via ACL**: true 3049 3050**Valid since**: 12 3051 3052### ohos.permission.MIGRATE_DATA 3053 3054Allows a system application to migrate data. 3055 3056**Permission level**: system_core 3057 3058**Authorization mode**: system_grant 3059 3060**Enable via ACL**: true 3061 3062**Valid since**: 12 3063 3064### ohos.permission.ACCESS_DYNAMIC_ICON 3065 3066Allows a system application to use dynamic icons. 3067 3068**Permission level**: system_basic 3069 3070**Authorization mode**: system_grant 3071 3072**Enable via ACL**: true 3073 3074**Valid since**: 12 3075 3076### ohos.permission.CHANGE_BUNDLE_UNINSTALL_STATE 3077 3078Allows a system application to change the uninstall status of the specified application. 3079 3080**Permission level**: system_core 3081 3082**Authorization mode**: system_grant 3083 3084**Enable via ACL**: true 3085 3086**Valid since**: 12 3087 3088### ohos.permission.MANAGE_STYLUS_EVENT 3089 3090Allows a system application to use the stylus capabilities. 3091 3092**Permission level**: system_basic 3093 3094**Authorization mode**: system_grant 3095 3096**Enable via ACL**: true 3097 3098**Valid since**: 12 3099 3100### ohos.permission.USE_CLOUD_DRIVE_SERVICE 3101 3102Allows a system application or service to use the DriveServiceAbility of the cloud space service to perform device-cloud sync. 3103 3104**Permission level**: system_basic 3105 3106**Authorization mode**: system_grant 3107 3108**Enable via ACL**: true 3109 3110**Valid since**: 12 3111 3112### ohos.permission.USE_CLOUD_BACKUP_SERVICE 3113 3114Allows a system application or service to trigger the BackupServiceAbility of the cloud space service to implement backup and backup-related event notifications. 3115 3116**Permission level**: system_basic 3117 3118**Authorization mode**: system_grant 3119 3120**Enable via ACL**: true 3121 3122**Valid since**: 12 3123 3124### ohos.permission.USE_CLOUD_COMMON_SERVICE 3125 3126Allows a system application to obtain cloud space information and resources through the CommonServiceAbility of the cloud space service. 3127 3128**Permission level**: system_basic 3129 3130**Authorization mode**: system_grant 3131 3132**Enable via ACL**: true 3133 3134**Valid since**: 12 3135 3136### ohos.permission.PRELOAD_APPLICATION 3137 3138Allows a system application or service to preload application processes. 3139 3140**Permission level**: system_basic 3141 3142**Authorization mode**: system_grant 3143 3144**Enable via ACL**: true 3145 3146**Valid since**: 12 3147 3148### ohos.permission.MANAGE_INPUT_INFRARED_EMITTER 3149 3150Allows a system application to use infrared interfaces. 3151 3152**Permission level**: normal 3153 3154**Authorization mode**: system_grant 3155 3156**Enable via ACL**: true 3157 3158**Valid since**: 12 3159 3160### ohos.permission.ENABLE_EXPERIENCE_HBM 3161 3162Allows an application to enable High Brightness Mode (HBM) for the screen. 3163 3164**Permission level**: system_basic 3165 3166**Authorization mode**: system_grant 3167 3168**Enable via ACL**: true 3169 3170**Valid since**: 13 3171 3172### ohos.permission.SET_PROCESS_CACHE_STATE 3173 3174Allows an application to set whether to support application cache and quick startup after cached. 3175 3176**Permission level**: system_basic 3177 3178**Authorization mode**: system_grant 3179 3180**Enable via ACL**: true 3181 3182**Valid since**: 12 3183 3184### ohos.permission.ACCESS_SYSTEM_APP_CERT 3185 3186Allows the caller to manage and use system service certificate credentials. 3187 3188**Permission level**: system_core 3189 3190**Authorization mode**: system_grant 3191 3192**Enable via ACL**: true 3193 3194**Valid since**: 12 3195 3196### ohos.permission.ACCESS_USER_TRUSTED_CERT 3197 3198Allows the caller to manage user CA certificates. 3199 3200**Permission level**: system_core 3201 3202**Authorization mode**: system_grant 3203 3204**Enable via ACL**: true 3205 3206**Valid since**: 12 3207 3208### ohos.permission.ACCESS_LOCAL_BACKUP 3209 3210Allows an application to access the local backup directory. 3211 3212**Permission level**: system_basic 3213 3214**Authorization mode**: system_grant 3215 3216**Enable via ACL**: true 3217 3218**Valid since**: 12 3219 3220### ohos.permission.CAST_AUDIO_OUTPUT 3221 3222Allows the system to cast audio or collaborate with another application to cast audio. 3223 3224**Permission level**: system_core 3225 3226**Authorization mode**: system_grant 3227 3228**Enable via ACL**: true 3229 3230**Valid since**: 12 3231 3232### ohos.permission.WRITE_RINGTONE 3233 3234Allows an application to write the ring tone library. 3235 3236**Permission level**: system_basic 3237 3238**Authorization mode**: system_grant 3239 3240**Enable via ACL**: true 3241 3242**Valid since**: 12 3243 3244### ohos.permission.GET_ACCOUNT_MINORS_INFO 3245 3246Allows a system application to obtain information about the minor users (users not of the legal age) of a user account. 3247 3248**Permission level**: system_basic 3249 3250**Authorization mode**: system_grant 3251 3252**Enable via ACL**: true 3253 3254**Valid since**: 12 3255 3256### ohos.permission.ACCESS_LOCAL_THEME 3257 3258Allows a system application to access the local theme information. 3259 3260**Permission level**: system_basic 3261 3262**Authorization mode**: system_grant 3263 3264**Enable via ACL**: true 3265 3266**Valid since**: 12 3267 3268### ohos.permission.ACCESS_SHADER_CACHE_DIR 3269 3270Allows a system application to access the shader_cache directory. 3271 3272**Permission level**: system_core 3273 3274**Authorization mode**: system_grant 3275 3276**Enable via ACL**: true 3277 3278**Valid since**: 12 3279 3280### ohos.permission.INSTALL_CLONE_BUNDLE 3281 3282Allows an application to install a cloned application. 3283 3284**Permission level**: system_core 3285 3286**Authorization mode**: system_grant 3287 3288**Enable via ACL**: true 3289 3290**Valid since**: 12 3291 3292### ohos.permission.UNINSTALL_CLONE_BUNDLE 3293 3294Allows an application to uninstall a cloned application. 3295 3296**Permission level**: system_core 3297 3298**Authorization mode**: system_grant 3299 3300**Enable via ACL**: true 3301 3302**Valid since**: 12 3303 3304### ohos.permission.ACCESS_SCREEN_LOCK_MEDIA_DATA 3305 3306Allows an application to access images and videos when the screen is locked. 3307 3308**Permission level**: system_core 3309 3310**Authorization mode**: system_grant 3311 3312**Enable via ACL**: true 3313 3314**Valid since**: 12 3315 3316### ohos.permission.ACCESS_SCREEN_LOCK_ALL_DATA 3317 3318Allows an application to access sensitive data, such as images and videos, call logs, call recordings, SMS messages, and emails, when the screen is locked. 3319 3320**Permission level**: system_core 3321 3322**Authorization mode**: system_grant 3323 3324**Enable via ACL**: true 3325 3326**Valid since**: 12 3327 3328### ohos.permission.ACCESS_DEVICE_COLLABORATION_PRIVATE_ABILITY 3329 3330Allows a system service or system application to access the device collaboration private ability. 3331 3332**Permission level**: system_basic 3333 3334**Authorization mode**: system_grant 3335 3336**Enable via ACL**: true 3337 3338**Valid since**: 12 3339 3340### ohos.permission.ACCESS_FILE_CONTENT_SHARE 3341 3342Allows a system service or system application to access shared files. 3343 3344**Permission level**: system_basic 3345 3346**Authorization mode**: system_grant 3347 3348**Enable via ACL**: true 3349 3350**Valid since**: 12 3351 3352### ohos.permission.ACCESS_RINGTONE_RESOURCE 3353 3354Allows a system application to access and write the ring tone public directory. 3355 3356**Permission level**: system_core 3357 3358**Authorization mode**: system_grant 3359 3360**Enable via ACL**: true 3361 3362**Valid since**: 12 3363 3364### ohos.permission.ACCESS_SUBSCRIPTION_CAPSULE_DATA 3365 3366Allows a system application to access the subscribed capsule data. 3367 3368**Permission level**: system_basic 3369 3370**Authorization mode**: system_grant 3371 3372**Enable via ACL**: true 3373 3374**Valid since**: 12 3375 3376### ohos.permission.ACCESS_SEARCH_SERVICE 3377 3378Allows a system application to call the local search ability provided by the fusion search service. 3379 3380**Permission level**: system_basic 3381 3382**Authorization mode**: system_grant 3383 3384**Enable via ACL**: true 3385 3386**Valid since**: 12 3387 3388### ohos.permission.INJECT_INPUT_EVENT 3389 3390Allows a system application to inject input events. 3391 3392**Permission level**: system_core 3393 3394**Authorization mode**: system_grant 3395 3396**Enable via ACL**: true 3397 3398**Valid since**: 12 3399 3400### ohos.permission.QUERY_SECURITY_EVENT 3401 3402Allows an application to obtain detailed security event information. 3403 3404**Permission level**: system_basic 3405 3406**Authorization mode**: system_grant 3407 3408**Enable via ACL**: true 3409 3410**Valid since**: 12 3411 3412### ohos.permission.REPORT_SECURITY_EVENT 3413 3414Allows an application to report security events to Security Guard. 3415 3416**Permission level**: system_basic 3417 3418**Authorization mode**: system_grant 3419 3420**Enable via ACL**: true 3421 3422**Valid since**: 12 3423 3424### ohos.permission.QUERY_SECURITY_MODEL_RESULT 3425 3426Allows an application to query the security model execution result. 3427 3428**Permission level**: system_basic 3429 3430**Authorization mode**: system_grant 3431 3432**Enable via ACL**: true 3433 3434**Valid since**: 12 3435 3436### ohos.permission.MANAGE_SECURITY_GUARD_CONFIG 3437 3438Allows an application to manage Security Guard configuration. 3439 3440**Permission level**: system_basic 3441 3442**Authorization mode**: system_grant 3443 3444**Enable via ACL**: true 3445 3446**Valid since**: 12 3447 3448### ohos.permission.COLLECT_SECURITY_EVENT 3449 3450Allows an application to collect security events. 3451 3452**Permission level**: system_core 3453 3454**Authorization mode**: system_grant 3455 3456**Enable via ACL**: true 3457 3458**Valid since**: 12 3459 3460### ohos.permission.QUERY_SECURITY_POLICY_FROM_CLOUD 3461 3462Allows an application to query security policies from the cloud. 3463 3464**Permission level**: system_basic 3465 3466**Authorization mode**: system_grant 3467 3468**Enable via ACL**: true 3469 3470**Valid since**: 12 3471 3472### ohos.permission.REPORT_SECURITY_EVENT_TO_CLOUD 3473 3474Allows an application to report security events to the cloud. 3475 3476**Permission level**: system_basic 3477 3478**Authorization mode**: system_grant 3479 3480**Enable via ACL**: true 3481 3482**Valid since**: 12 3483 3484### ohos.permission.ACCESS_SCAN_SERVICE 3485 3486Allows a system application to invoke the code dispatching capability provided by the scan-to-access service. 3487 3488**Permission level**: system_basic 3489 3490**Authorization mode**: system_grant 3491 3492**Enable via ACL**: true 3493 3494**Valid since**: 12 3495 3496### ohos.permission.ACCESS_FACTORY_OTA_DIR 3497 3498Allows a system application to access the over-the-air update directory. 3499 3500**Permission level**: system_basic 3501 3502**Authorization mode**: system_grant 3503 3504**Enable via ACL**: true 3505 3506**Valid since**: 12 3507 3508### ohos.permission.MANAGE_MOUSE_CURSOR 3509 3510Allows a system application to set the mouse cursor status. 3511 3512**Permission level**: system_core 3513 3514**Authorization mode**: system_grant 3515 3516**Enable via ACL**: true 3517 3518**Valid since**: 12 3519 3520### ohos.permission.FILTER_INPUT_EVENT 3521 3522Allows a system application to filter input events. 3523 3524**Permission level**: system_core 3525 3526**Authorization mode**: system_grant 3527 3528**Enable via ACL**: true 3529 3530**Valid since**: 12 3531 3532### ohos.permission.ACTIVATE_DEVICE_PSI 3533 3534Allows a system application or system ability to report the device activation status. 3535 3536**Permission level**: system_basic 3537 3538**Authorization mode**: system_grant 3539 3540**Enable via ACL**: true 3541 3542**Valid since**: 12 3543 3544### ohos.permission.DUMP_AUDIO 3545 3546Allows an application to dump audio data to a local storage device. 3547 3548**Permission level**: system_core 3549 3550**Authorization mode**: system_grant 3551 3552**Enable via ACL**: true 3553 3554**Valid since**: 12 3555 3556### ohos.permission.RECEIVE_FUSION_MESSAGES 3557 3558Allows a system application or system ability to receive fusion service messages. 3559 3560**Permission level**: system_basic 3561 3562**Authorization mode**: system_grant 3563 3564**Enable via ACL**: true 3565 3566**Valid since**: 12 3567 3568### ohos.permission.ACCESS_FUSION_MANAGER 3569 3570Allows a system ability or system application to access the fusion service. 3571 3572**Permission level**: system_basic 3573 3574**Authorization mode**: system_grant 3575 3576**Enable via ACL**: true 3577 3578**Valid since**: 12 3579 3580### ohos.permission.PUBLISH_LOCATION_EVENT 3581 3582Allows an application to publish common events related to location management. 3583 3584**Permission level**: system_basic 3585 3586**Authorization mode**: system_grant 3587 3588**Enable via ACL**: true 3589 3590**Valid since**: 12 3591 3592### ohos.permission.ACCESS_MULTICORE_HYBRID_ABILITY 3593 3594Allows an application to access the system service APIs of the smart watch. 3595 3596**Permission level**: system_basic 3597 3598**Authorization mode**: system_grant 3599 3600**Enable via ACL**: true 3601 3602**Valid since**: 12 3603 3604### ohos.permission.ACCESS_DEVICE_COLLABORATION_SERVICE 3605 3606Allows an application to use the multi-screen collaboration service. 3607 3608**Permission level**: system_basic 3609 3610**Authorization mode**: system_grant 3611 3612**Enable via ACL**: true 3613 3614**Valid since**: 12 3615 3616### ohos.permission.GET_APP_DOMAIN_BUNDLE_INFO 3617 3618Allows an application to access the mappings between applications and domain names. 3619 3620**Permission level**: system_basic 3621 3622**Authorization mode**: system_grant 3623 3624**Enable via ACL**: true 3625 3626**Valid since**: 12 3627 3628### ohos.permission.OPEN_FILE 3629 3630Allows a system application to start the File Manager application to open files or folders. 3631 3632**Permission level**: system_basic 3633 3634**Authorization mode**: system_grant 3635 3636**Enable via ACL**: true 3637 3638**Valid since**: 12 3639 3640### ohos.permission.PROCESS_FILE_COPY_PASTE 3641 3642Allows a system application to start the File Manager application to copy, cut, and paste files. 3643 3644**Permission level**: system_basic 3645 3646**Authorization mode**: system_grant 3647 3648**Enable via ACL**: true 3649 3650**Valid since**: 12 3651 3652### ohos.permission.CLEAR_RECYCLEBIN 3653 3654Allows a system application to start the File Manager application to clear the trash. 3655 3656**Permission level**: system_basic 3657 3658**Authorization mode**: system_grant 3659 3660**Enable via ACL**: true 3661 3662**Valid since**: 12 3663 3664### ohos.permission.GET_FILE_THUMBNAIL 3665 3666Allows a system ability to obtain file thumbnails. 3667 3668**Permission level**: system_basic 3669 3670**Authorization mode**: system_grant 3671 3672**Enable via ACL**: true 3673 3674**Valid since**: 12 3675 3676### ohos.permission.NETWORK_DHCP 3677 3678Allows a system application to apply for IP addresses from the DHCP server. 3679 3680**Permission level**: system_basic 3681 3682**Authorization mode**: system_grant 3683 3684**Enable via ACL**: true 3685 3686**Valid since**: 12 3687 3688### ohos.permission.ALLOW_CONNECT_CAR 3689 3690Allows an application to connect to a telematics device. 3691 3692**Permission level**: system_basic 3693 3694**Authorization mode**: system_grant 3695 3696**Enable via ACL**: true 3697 3698**Valid since**: 12 3699 3700### ohos.permission.ACCESS_IDM_WIDGET 3701 3702Allows a system application to access the widget for credential enrollment. 3703 3704**Permission level**: system_basic 3705 3706**Authorization mode**: system_grant 3707 3708**Enable via ACL**: true 3709 3710**Valid since**: 12 3711 3712### ohos.permission.MANAGE_ACCESSORY 3713 3714Allows an application to obtain information about accessories (such as the keyboard and mouse), send data to accessories, and obtain responses from them. 3715 3716**Permission level**: system_basic 3717 3718**Authorization mode**: system_grant 3719 3720**Enable via ACL**: true 3721 3722**Valid since**: 12 3723 3724### ohos.permission.COLLECT_ACCESSORY_LOG 3725 3726Allows an application to obtain logs of accessories (such as the keyboard and mouse). 3727 3728**Permission level**: system_basic 3729 3730**Authorization mode**: system_grant 3731 3732**Enable via ACL**: true 3733 3734**Valid since**: 12 3735 3736### ohos.permission.INSTALL_INTERNALTESTING_BUNDLE 3737 3738Allows an application to install beta applications. 3739 3740**Permission level**: system_core 3741 3742**Authorization mode**: system_grant 3743 3744**Enable via ACL**: true 3745 3746**Valid since**: 12 3747 3748### ohos.permission.PUBLISH_DISPLAY_ROTATION_EVENT 3749 3750Allows a system ability to send screen rotation events to applications or other system abilities. 3751 3752**Permission level**: system_core 3753 3754**Authorization mode**: system_grant 3755 3756**Enable via ACL**: true 3757 3758**Valid since**: 12 3759 3760### ohos.permission.PUBLISH_CAST_PLUGGED_EVENT 3761 3762Allows a system ability to send the projection cable plug-in and plug-out events to applications or other system abilities. 3763 3764**Permission level**: system_core 3765 3766**Authorization mode**: system_grant 3767 3768**Enable via ACL**: true 3769 3770**Valid since**: 12 3771 3772### ohos.permission.GET_ETHERNET_LOCAL_MAC 3773 3774Allows an application to obtain the current MAC address of the Ethernet. 3775 3776**Permission level**: system_basic 3777 3778**Authorization mode**: system_grant 3779 3780**Enable via ACL**: true 3781 3782**Valid since**: 13 3783 3784### ohos.permission.ALLOW_SHOW_NON_SECURE_WINDOWS 3785 3786Allows a modal UIExtension to unhide non-secure windows. 3787 3788**Permission level**: system_basic 3789 3790**Authorization mode**: system_grant 3791 3792**Enable via ACL**: true 3793 3794**Valid since**: 12 3795 3796### ohos.permission.ACCESS_DISTRIBUTED_MODEM 3797 3798Allows a system service to access distributed modems. 3799 3800**Permission level**: system_basic 3801 3802**Authorization mode**: system_grant 3803 3804**Enable via ACL**: true 3805 3806**Valid since**: 13 3807 3808### ohos.permission.GET_TELEPHONY_ESIM_STATE 3809 3810Allows a system application to obtain eSIM profile information and data written on the device chip when the eSIM is activated. 3811 3812**Permission level**: system_basic 3813 3814**Authorization mode**: system_grant 3815 3816**Enable via ACL**: true 3817 3818**Valid since**: 14 3819 3820### ohos.permission.SET_TELEPHONY_ESIM_STATE 3821 3822Allows a system application to modify the eSIM profile and upgrade the eSIM. 3823 3824**Permission level**: system_basic 3825 3826**Authorization mode**: system_grant 3827 3828**Enable via ACL**: true 3829 3830**Valid since**: 14 3831 3832### ohos.permission.CAMERA_BACKGROUND 3833 3834Allows a system application to use the camera in the background. 3835 3836**Permission level**: system_core 3837 3838**Authorization mode**: system_grant 3839 3840**Enable via ACL**: true 3841 3842**Valid since**: 13 3843 3844### ohos.permission.CALLED_TRANSITION_ON_LOCK_SCREEN 3845 3846Allows an application to be started by another application on the lock screen page and redirected. 3847 3848**Permission level**: system_basic 3849 3850**Authorization mode**: system_grant 3851 3852**Enable via ACL**: true 3853 3854**Valid since**: 13 3855 3856### ohos.permission.CALLED_BELOW_LOCK_SCREEN 3857 3858Allows an application to start even when the screen is locked. 3859 3860**Permission level**: system_basic 3861 3862**Authorization mode**: system_grant 3863 3864**Enable via ACL**: true 3865 3866**Valid since**: 13 3867 3868### ohos.permission.ACCESS_ANALYTICS 3869 3870Allows a system service to access and read files in **/data/log/faultlog/faultlogger** directory. 3871 3872**Permission level**: system_basic 3873 3874**Authorization mode**: system_grant 3875 3876**Enable via ACL**: true 3877 3878**Valid since**: 12 3879 3880### ohos.permission.START_RESTORE_NOTIFICATION 3881 3882Allows a system application to subscribe to the restore start event of the backup and restore framework. 3883 3884**Permission level**: system_basic 3885 3886**Authorization mode**: system_grant 3887 3888**Enable via ACL**: true 3889 3890**Valid since**: 13 3891 3892### ohos.permission.READ_WRITE_USB_DEV 3893 3894Allows an application to connect to a device and read and write the device data via USB for debugging purposes. 3895 3896Currently, this permission is available only to 2-in-1 device applications. 3897 3898**Permission level**: system_basic 3899 3900**Authorization mode**: system_grant 3901 3902**Enable via ACL**: true 3903 3904**Valid since**: 13 3905 3906### ohos.permission.READ_WRITE_USER_FILE 3907 3908Allows an application to access and modify files in user directories. 3909 3910Currently, this permission is available only to 2-in-1 device applications. 3911 3912**Permission level**: system_basic 3913 3914**Authorization mode**: system_grant 3915 3916**Enable via ACL**: true 3917 3918**Valid since**: 13 3919 3920### ohos.permission.READ_WEATHER_DATA 3921 3922Allows an application to read weather data. 3923 3924**Permission level**: system_basic 3925 3926**Authorization mode**: system_grant 3927 3928**Enable via ACL**: true 3929 3930**Valid since**: 14 3931 3932### ohos.permission.ACCESS_MCU_LOG_DIR 3933 3934Allows a system application to access the microcontroller unit (MCU) log directory. 3935 3936**Permission level**: system_basic 3937 3938**Authorization mode**: system_grant 3939 3940**Enable via ACL**: true 3941 3942**Valid since**: 12 3943 3944### ohos.permission.GRANT_SHORT_TERM_WRITE_MEDIAVIDEO 3945 3946Allows a system application or system service to grant third-party applications the temporary permission to save images and videos for the specified period of time. 3947 3948**Permission level**: system_core 3949 3950**Authorization mode**: system_grant 3951 3952**Enable via ACL**: true 3953 3954**Valid since**: 12 3955 3956### ohos.permission.CHECK_QUICKFIX_RESULT 3957 3958Allows a system service or system application to check the patch installation result. 3959 3960**Permission level**: system_core 3961 3962**Authorization mode**: system_grant 3963 3964**Enable via ACL**: true 3965 3966**Valid since**: 12 3967 3968**Changelog**: This permission is available to system services in API versions 12 to 13. From API version 14, it is available to system applications. 3969 3970### ohos.permission.USER_AUTH_FROM_BACKGROUND 3971 3972Allows a system application or service to initiate user identity authentication from the background. 3973 3974**Permission level**: system_basic 3975 3976**Authorization mode**: system_grant 3977 3978**Enable via ACL**: true 3979 3980**Valid since**: 13 3981 3982### ohos.permission.MANAGE_RECOVERY_KEY 3983 3984Allows an application to create or remove the recovery key. 3985 3986**Permission level**: system_core 3987 3988**Authorization mode**: system_grant 3989 3990**Enable via ACL**: true 3991 3992**Valid since**: 14 3993 3994### ohos.permission.UTILIZE_RECOVERY_KEY 3995 3996Allows an application to utilize the recovery key to reset the lock screen password or restore user data. 3997 3998**Permission level**: system_core 3999 4000**Authorization mode**: system_grant 4001 4002**Enable via ACL**: true 4003 4004**Valid since**: 14 4005 4006### ohos.permission.GET_RECOVERY_KEY_BRIEF_INFORMATION 4007 4008Allows an application to obtain brief information about the recovery key. 4009 4010**Permission level**: system_basic 4011 4012**Authorization mode**: system_grant 4013 4014**Enable via ACL**: true 4015 4016**Valid since**: 14 4017 4018### ohos.permission.ACCESS_VIRTUAL_KEYBOARD 4019 4020Allows an application to update the virtual keyboard status or a service to query the virtual keyboard status. 4021 4022With this permission, the application can update the virtual keyboard status and the service can query the virtual keyboard status. Currently, this permission is available only to applications or services running on 2-in-1 devices. 4023 4024**Permission level**: system_basic 4025 4026**Authorization mode**: system_grant 4027 4028**Enable via ACL**: true 4029 4030**Valid since**: 14 4031 4032### ohos.permission.READ_APP_LOCK 4033 4034Allows a system application to read the application lock state. 4035 4036**Permission level**: system_basic 4037 4038**Authorization mode**: system_grant 4039 4040**Enable via ACL**: true 4041 4042**Valid since**: 13 4043 4044### ohos.permission.WRITE_APP_LOCK 4045 4046Allows a system application to set the application lock state. 4047 4048**Permission level**: system_core 4049 4050**Authorization mode**: system_grant 4051 4052**Enable via ACL**: true 4053 4054**Valid since**: 13 4055 4056### ohos.permission.ACCESS_APP_LOCK 4057 4058Allows an application to access the application lock. 4059 4060**Permission level**: system_basic 4061 4062**Authorization mode**: system_grant 4063 4064**Enable via ACL**: true 4065 4066**Valid since**: 13 4067 4068### ohos.permission.kernel.DISABLE_CODE_MEMORY_PROTECTION 4069 4070Allows an application to disable its runtime code integrity protection. 4071 4072This permission is available to the applications developed using the cross-platform framework. Currently, it is available only to applications running on tablets and 2-in-1 devices. 4073 4074**Permission level**: system_basic 4075 4076**Authorization mode**: system_grant 4077 4078**Enable via ACL**: true 4079 4080**Valid since**: 14 4081 4082### ohos.permission.kernel.ALLOW_WRITABLE_CODE_MEMORY 4083 4084Allows an application to apply for writable and executable anonymous memory. 4085 4086This permission is available to the applications developed using the cross-platform framework. Currently, it is available only to applications running on tablets and 2-in-1 devices. 4087 4088**Permission level**: system_basic 4089 4090**Authorization mode**: system_grant 4091 4092**Enable via ACL**: true 4093 4094**Valid since**: 14 4095 4096### ohos.permission.MANAGE_UDMF_APP_SHARE_OPTION 4097 4098Allows an application to set or remove the sharing range of the data supported by the UDMF. 4099 4100**Permission level**: system_basic 4101 4102**Authorization mode**: system_grant 4103 4104**Enable via ACL**: true 4105 4106**Valid since**: 14 4107 4108### ohos.permission.MANAGE_PASTEBOARD_APP_SHARE_OPTION 4109 4110Allows an application to manage the pasteable range of pasteboard data. 4111 4112**Permission level**: system_basic 4113 4114**Authorization mode**: system_grant 4115 4116**Enable via ACL**: true 4117 4118**Valid since**: 14 4119 4120### ohos.permission.ACCESS_APP_INSTALL_DIR 4121 4122Allows a system application to access the application installation directory. 4123 4124**Permission level**: system_core 4125 4126**Authorization mode**: system_grant 4127 4128**Enable via ACL**: true 4129 4130**Valid since**: 14 4131 4132### ohos.permission.SET_PAC_URL 4133 4134Allows an application to set the URL of the proxy auto config (PAC) script. 4135 4136After the script address is configured, other applications can read and parse this script and determine whether to use a proxy based on the parsing result. 4137 4138**Permission level**: system_basic 4139 4140**Authorization mode**: system_grant 4141 4142**Enable via ACL**: true 4143 4144**Valid since**: 15 4145 4146### ohos.permission.ACCESS_ACCOUNT_SERVICE_EXTENSION_ABILITY 4147 4148Allows a system application to invoke the services provided by the account ServiceExtensionAbility. 4149 4150**Permission level**: system_basic 4151 4152**Authorization mode**: system_grant 4153 4154**Enable via ACL**: true 4155 4156**Valid since**: 15 4157 4158### ohos.permission.STORAGE_MANAGER_CRYPT 4159 4160Allows a system application or system service to call APIs to perform encryption and decryption. 4161 4162**Permission level**: system_core 4163 4164**Authorization mode**: system_grant 4165 4166**Enable via ACL**: true 4167 4168**Valid since**: 12 4169 4170**Changelog**: This permission is available only to system services in API versions 12 to 14. From API version 15, it is also available to system applications. 4171 4172### ohos.permission.EXEMPT_CAPTURE_SCREEN_AUTHORIZE 4173 4174Allows an application to initiate screen recording without displaying the user authorization dialog box. 4175 4176**Permission level**: system_core 4177 4178**Authorization mode**: system_grant 4179 4180**Enable via ACL**: true 4181 4182**Valid since**: 15 4183 4184### ohos.permission.USE_FRAUD_MESSAGES_PICKER 4185 4186Allows an application to use the fraud message Picker to obtain SMS messages. 4187 4188**Permission level**: system_basic 4189 4190**Authorization mode**: system_grant 4191 4192**Valid since**: 15 4193 4194### ohos.permission.USE_FRAUD_CALL_LOG_PICKER 4195 4196Allows an application to use the fraud call log Picker to obtain call logs. 4197 4198**Permission level**: system_basic 4199 4200**Authorization mode**: system_grant 4201 4202**Valid since**: 15 4203 4204### ohos.permission.kernel.ALLOW_EXECUTABLE_FORT_MEMORY 4205 4206Allows an application to have its system JS engine to apply for anonymous executable memory with the MAP_FORT identifier. 4207 4208After the application has this permission, the system JS engine can request anonymous executable memory with MAP_FORT for just-in-time (JIT) compilation, which increase the runtime execution efficiency. 4209 4210**Permission level**: system_basic 4211 4212**Authorization mode**: system_grant 4213 4214**Valid since**: 14 4215 4216### ohos.permission.PERSONAL_MANAGE_RESTRICTIONS 4217 4218Allows a device administrator application to manage personal device restrictions. 4219 4220**Permission level**: system_basic 4221 4222**Authorization mode**: system_grant 4223 4224**Enable via ACL**: true 4225 4226**Valid since**: 15 4227 4228### ohos.permission.START_PROVISIONING_MESSAGE 4229 4230Allows an application to start the device management service deployment process, which activates the application as a personal device administrator application. 4231 4232**Permission level**: system_basic 4233 4234**Authorization mode**: system_grant 4235 4236**Enable via ACL**: true 4237 4238**Valid since**: 15 4239 4240### ohos.permission.PRELOAD_FILE 4241 4242Allows an application to preload files to improve the file opening speed. 4243 4244This permission is available only to document editing applications. 4245 4246**Permission level**: system_basic 4247 4248**Authorization mode**: system_grant 4249 4250**Valid since**: 15 4251 4252### ohos.permission.ACCESS_DISK_PHY_INFO 4253 4254Allows an application to obtain the disk hardware information. 4255 4256This permission is available only to securities applications for securities and stock trading. 4257 4258**Permission level**: system_basic 4259 4260**Authorization mode**: system_grant 4261 4262**Enable via ACL**: true 4263 4264**Valid since**: 15 4265 4266## system_grant Permissions (Unavailable via ACL) 4267 4268The following lists the system_grant permissions that cannot be requested via the ACL. 4269 4270For details about the process for requesting permissions, see [Workflow for Requesting Permissions](determine-application-mode.md). 4271 4272### ohos.permission.RECEIVER_STARTUP_COMPLETED 4273 4274Allows an application to subscribe to the startup broadcast. 4275 4276**Permission level**: system_basic 4277 4278**Authorization mode**: system_grant 4279 4280**Enable via ACL**: false 4281 4282**Valid since**: 9 4283 4284### ohos.permission.SYSTEM_LIGHT_CONTROL 4285 4286Allows an application to control lights, including turning on and off lights. 4287 4288**Permission level**: system_basic 4289 4290**Authorization mode**: system_grant 4291 4292**Enable via ACL**: false 4293 4294**Valid since**: 11 4295 4296### ohos.permission.QUERY_ACCESSIBILITY_ELEMENT 4297 4298Allows an application to query accessibility elements in batches. 4299 4300**Permission level**: system_basic 4301 4302**Authorization mode**: system_grant 4303 4304**Enable via ACL**: false 4305 4306**Valid since**: 11 4307 4308### ohos.permission.GET_ALL_APP_ACCOUNTS 4309 4310Allows an application to obtain information about all application accounts. 4311 4312**Permission level**: system_core 4313 4314**Authorization mode**: system_grant 4315 4316**Enable via ACL**: false 4317 4318**Valid since**: 7 4319 4320### ohos.permission.MANAGE_DEVICE_AUTH_CRED 4321 4322Allows an application to call interfaces of the DeviceAuthCredMgr application. 4323 4324**Permission level**: system_basic 4325 4326**Authorization mode**: system_grant 4327 4328**Enable via ACL**: false 4329 4330**Valid since**: 10 4331 4332### ohos.permission.ACCESS_AUTH_RESPOOL 4333 4334Allows an SA to register the executor. 4335 4336**Permission level**: system_core 4337 4338**Authorization mode**: system_grant 4339 4340**Enable via ACL**: false 4341 4342**Valid since**: 9 4343 4344### ohos.permission.READ_ACCESSIBILITY_CONFIG 4345 4346Allows an application to read the accessibility configuration. 4347 4348**Permission level**: system_basic 4349 4350**Authorization mode**: system_grant 4351 4352**Enable via ACL**: false 4353 4354**Valid since**: 9 4355 4356### ohos.permission.WRITE_APP_PUSH_DATA 4357 4358Allows the push service to write data to an application. 4359 4360**Permission level**: system_basic 4361 4362**Authorization mode**: system_grant 4363 4364**Enable via ACL**: false 4365 4366**Valid since**: 10 4367 4368### ohos.permission.READ_APP_PUSH_DATA 4369 4370Allows the push service to read data from an application. 4371 4372**Permission level**: system_basic 4373 4374**Authorization mode**: system_grant 4375 4376**Enable via ACL**: false 4377 4378**Valid since**: 10 4379 4380### ohos.permission.NETSYS_INTERNAL 4381 4382Allows an SA to call the network diagnosis, Wi-Fi, network adapter listening, and iptables setting APIs of **netsys**. 4383 4384**Permission level**: system_basic 4385 4386**Authorization mode**: system_grant 4387 4388**Enable via ACL**: false 4389 4390**Valid since**: 10 4391 4392### ohos.permission.DISTRIBUTED_SOFTBUS_CENTER 4393 4394Allows networking between different devices. 4395 4396**Permission level**: system_basic 4397 4398**Authorization mode**: system_grant 4399 4400**Enable via ACL**: false 4401 4402**Valid since**: 9 4403 4404### ohos.permission.GET_NETWORK_STATS 4405 4406Allows a system application to obtain historical network traffic. 4407 4408**Permission level**: system_basic 4409 4410**Authorization mode**: system_grant 4411 4412**Enable via ACL**: false for API versions 10 to 11; true for API version 12 and later 4413 4414**Valid since**: 10 4415 4416### ohos.permission.RESTRICT_APPLICATION_ACTIVE 4417 4418Allows a standby component to publish a customized network limit event. 4419 4420**Permission level**: system_basic 4421 4422**Authorization mode**: system_grant 4423 4424**Enable via ACL**: false 4425 4426**Valid since**: 10 4427 4428### ohos.permission.CONNECT_CELLULAR_CALL_SERVICE 4429 4430Allows a system service to access the cellular call SA. 4431 4432**Permission level**: system_basic 4433 4434**Authorization mode**: system_grant 4435 4436**Enable via ACL**: false 4437 4438**Valid since**: 10 4439 4440### ohos.permission.CONNECT_IMS_SERVICE 4441 4442Allows a system service to access the IMS SA. 4443 4444**Permission level**: system_basic 4445 4446**Authorization mode**: system_grant 4447 4448**Enable via ACL**: false 4449 4450**Valid since**: 10 4451 4452### ohos.permission.ENFORCE_USER_IDM 4453 4454Allows an SA to delete the IAM user information without a token. 4455 4456**Permission level**: system_core 4457 4458**Authorization mode**: system_grant 4459 4460**Enable via ACL**: false 4461 4462**Valid since**: 9 4463 4464### ohos.permission.WRITE_ACCESSIBILITY_CONFIG 4465 4466Allows an application to set the accessibility configuration. 4467 4468**Permission level**: system_basic 4469 4470**Authorization mode**: system_grant 4471 4472**Enable via ACL**: false 4473 4474**Valid since**: 9 4475 4476### ohos.permission.ENABLE_DISTRIBUTED_HARDWARE 4477 4478Allows a system service to enable distributed hardware resources. 4479 4480**Permission level**: system_basic 4481 4482**Authorization mode**: system_grant 4483 4484**Enable via ACL**: false 4485 4486**Valid since**: 11 4487 4488### ohos.permission.ACCESS_SUPER_HUB 4489 4490Allows an application to access Super Hub. 4491 4492**Permission level**: system_basic 4493 4494**Authorization mode**: system_grant 4495 4496**Enable via ACL**: false 4497 4498**Valid since**: 12 4499 4500### ohos.permission.CALLED_UIEXTENSION_ON_LOCK_SCREEN 4501 4502Allows a UIExtensionAbility to be displayed on the locked screen. 4503 4504**Permission level**: system_core 4505 4506**Authorization mode**: system_grant 4507 4508**Enable via ACL**: false 4509 4510**Valid since**: 14 4511 4512## user_grant Permissions (Available via ACL) 4513 4514The following lists the user_grant permissions that can be requested via the ACL. 4515 4516For details about the process for requesting permissions, see [Workflow for Requesting Permissions](determine-application-mode.md). 4517 4518### ohos.permission.READ_AUDIO 4519 4520Allows an application to access the audio files in a user directory. 4521 4522**Permission level**: system_basic 4523 4524**Authorization mode**: user_grant 4525 4526**Enable via ACL**: true 4527 4528**Valid since**: 9 4529 4530### ohos.permission.READ_DOCUMENT 4531 4532Allows an application to access the documents in a user directory. 4533 4534**Permission level**: system_basic 4535 4536**Authorization mode**: user_grant 4537 4538**Enable via ACL**: true 4539 4540**Valid since**: 9 4541 4542**Deprecated from**: 12 4543 4544**Alternative solution**: 4545 4546See the [alternative solution of the **Files** permission group](app-permission-group-list.md#filesdeprecated). 4547 4548### ohos.permission.READ_IMAGEVIDEO 4549 4550Allows an application to access the images/videos in a user directory. 4551 4552**Permission level**: system_basic 4553 4554**Authorization mode**: user_grant 4555 4556**Enable via ACL**: true 4557 4558**Valid since**: 9 4559 4560### ohos.permission.WRITE_AUDIO 4561 4562Allows an application to modify the audio files in a user directory. 4563 4564**Permission level**: system_basic 4565 4566**Authorization mode**: user_grant 4567 4568**Enable via ACL**: true 4569 4570**Valid since**: 9 4571 4572### ohos.permission.WRITE_DOCUMENT 4573 4574Allows an application to modify the documents in a user directory. 4575 4576**Permission level**: system_basic 4577 4578**Authorization mode**: user_grant 4579 4580**Enable via ACL**: true 4581 4582**Valid since**: 9 4583 4584**Deprecated from**: 12 4585 4586**Alternative solution**: 4587 4588See the [alternative solution of the **Files** permission group](app-permission-group-list.md#filesdeprecated). 4589 4590### ohos.permission.WRITE_IMAGEVIDEO 4591 4592Allows an application to modify the images/videos in a user directory. 4593 4594**Permission level**: system_basic 4595 4596**Authorization mode**: user_grant 4597 4598**Enable via ACL**: true 4599 4600**Valid since**: 9 4601 4602### ohos.permission.READ_CONTACTS 4603 4604Allows an application to read **Contacts**. 4605 4606**Permission level**: system_basic 4607 4608**Authorization mode**: user_grant 4609 4610**Enable via ACL**: true 4611 4612**Valid since**: 8 4613 4614### ohos.permission.WRITE_CONTACTS 4615 4616Allows an application to add, remove, and modify **Contacts**. 4617 4618**Permission level**: system_basic 4619 4620**Authorization mode**: user_grant 4621 4622**Enable via ACL**: true 4623 4624**Valid since**: 8 4625 4626### ohos.permission.READ_WHOLE_CALENDAR 4627 4628Allows an application to read all calendar information. 4629 4630**Permission level**: system_basic 4631 4632**Authorization mode**: user_grant 4633 4634**Enable via ACL**: true 4635 4636**Valid since**: 9 4637 4638### ohos.permission.WRITE_WHOLE_CALENDAR 4639 4640Allows an application to add, remove, or edit calendar events. 4641 4642**Permission level**: system_basic 4643 4644**Authorization mode**: user_grant 4645 4646**Enable via ACL**: true 4647 4648**Valid since**: 9 4649 4650### ohos.permission.GET_INSTALLED_BUNDLE_LIST 4651 4652Allows an application to obtain the list of installed applications. 4653 4654**Permission level**: system_basic 4655 4656**Authorization mode**: user_grant 4657 4658**Enable via ACL**: true 4659 4660**Valid since**: 10 4661 4662### ohos.permission.ANSWER_CALL 4663 4664Allows an application to answer incoming calls. 4665 4666**Permission level**: system_basic 4667 4668**Authorization mode**: user_grant 4669 4670**Enable via ACL**: true 4671 4672**Valid since**: 9 4673 4674### ohos.permission.MANAGE_VOICEMAIL 4675 4676Allows an application to access messages in the voice mailbox. 4677 4678**Permission level**: system_basic 4679 4680**Authorization mode**: user_grant 4681 4682**Enable via ACL**: true 4683 4684**Valid since**: 8 4685 4686### ohos.permission.READ_CALL_LOG 4687 4688Allows an application to read call logs. 4689 4690**Permission level**: system_basic 4691 4692**Authorization mode**: user_grant 4693 4694**Enable via ACL**: true 4695 4696**Valid since**: 8 4697 4698### ohos.permission.READ_CELL_MESSAGES 4699 4700Allows an application to read cell broadcast messages received by the device. 4701 4702**Permission level**: system_basic 4703 4704**Authorization mode**: user_grant 4705 4706**Enable via ACL**: true 4707 4708**Valid since**: 8 4709 4710### ohos.permission.READ_MESSAGES 4711 4712Allows an application to read messages. 4713 4714**Permission level**: system_basic 4715 4716**Authorization mode**: user_grant 4717 4718**Enable via ACL**: true 4719 4720**Valid since**: 8 4721 4722### ohos.permission.RECEIVE_MMS 4723 4724Allows an application to receive and process MMS messages. 4725 4726**Permission level**: system_basic 4727 4728**Authorization mode**: user_grant 4729 4730**Enable via ACL**: true 4731 4732**Valid since**: 8 4733 4734### ohos.permission.RECEIVE_SMS 4735 4736Allows an application to receive and process SMS messages. 4737 4738**Permission level**: system_basic 4739 4740**Authorization mode**: user_grant 4741 4742**Enable via ACL**: true 4743 4744**Valid since**: 8 4745 4746### ohos.permission.RECEIVE_WAP_MESSAGES 4747 4748Allows an application to receive and process WAP messages. 4749 4750**Permission level**: system_basic 4751 4752**Authorization mode**: user_grant 4753 4754**Enable via ACL**: true 4755 4756**Valid since**: 8 4757 4758### ohos.permission.SEND_MESSAGES 4759 4760Allows an application to send messages. 4761 4762**Permission level**: system_basic 4763 4764**Authorization mode**: user_grant 4765 4766**Enable via ACL**: true 4767 4768**Valid since**: 8 4769 4770### ohos.permission.WRITE_CALL_LOG 4771 4772Allows an application to add, remove, and edit call logs. 4773 4774**Permission level**: system_basic 4775 4776**Authorization mode**: user_grant 4777 4778**Enable via ACL**: true 4779 4780**Valid since**: 8 4781 4782### ohos.permission.READ_PASTEBOARD 4783 4784Allows an application to read **Pasteboard** data. 4785 4786**Permission level**: system_basic 4787 4788**Authorization mode**: user_grant 4789 4790**Enable via ACL**: true 4791 4792**Valid since**: 11 4793 4794### ohos.permission.READ_WRITE_DESKTOP_DIRECTORY 4795 4796Allows an application to access the **Desktop** directory and its subdirectories in the user directory. 4797 4798Currently, this permission is available only to 2-in-1 device applications. 4799 4800**Permission level**: system_basic 4801 4802**Authorization mode**: user_grant 4803 4804**Enable via ACL**: true 4805 4806**Valid since**: 11 4807 4808### ohos.permission.SHORT_TERM_WRITE_IMAGEVIDEO 4809 4810Allows an application to save images and videos to the user's directory within up to 30 minutes after obtaining the permission. 4811 4812**Permission level**: system_basic 4813 4814**Authorization mode**: user_grant 4815 4816**Enable via ACL**: true 4817 4818**Valid since**: 12 4819 4820### ohos.permission.CUSTOM_SCREEN_CAPTURE 4821 4822Allows an application to capture screen information. 4823 4824With this permission, the application can perform operations such as taking screenshots and recording on-screen information. Currently, this permission is available only to applications running on tablets and 2-in-1 devices. 4825 4826**Permission level**: system_basic 4827 4828**Authorization mode**: user_grant 4829 4830**Enable via ACL**: true 4831 4832**Valid since**: 14 4833