Enabling Display Over Other Apps Permission via MDM/EMM OEMConfig

NOTE 1. For Android 11 and below with MX 11.5 or earlier, you will need to use Permission Access Configuration in Legacy Zebra OEMConfig 11.5.x.x. Refer to TechDocs: Permission Access Configuration. 2. For Android 11 and up with MX 11.5 or later, you must use Package Configuration in Zebra OEMConfig Powered by MX (com.zebra.oemconfig.release) 11.9.x.x up. Refer to TechDocs: Package Configuration.

 
The example steps below were tested using the app Dash Cam Travel and EMM Microsoft Intune.

Procedure:
 

NOTE Use the System Alert permission from Android. The permission was introduced in Android 6.0, and it can allow an app to be displayed on top of another app, obscuring the lower-level app. To use the SYSTEM_ALERT_WINDOW permission, an app has to have explicit, manual approval from the user. To understand how to obtain an application signature, refer to TechDocs: SigTools sample app.

 

1. Log in to Microsoft Intune.
2. Install the required OEMConfig application from the Managed Google Play Store. You can use both for testing purposes as well.

 

Android 11 and below with MX 11.5 or earlier:

 

For Android 11 and later with MX 11.5 or later:

 

3. For Legacy Zebra OEMConfig, add and configure Permission Access Configuration.

• Permission Access Action: Grant
• Grant Permission: System Alert Window
• Grant Application Package: cz.thomasvalek.dashcamtravel
• Grant Application Signature: (refer to the video at the end of this article for steps on how to generate the app signature.)

4. For Zebra OEMConfig Powered by MX, configure Package Configuration. 

• Package Name: cz.thomasvalek.dashcamtravel
• Package Signing Certificate: (refer to the video at the end of this article for steps on how to generate the app signature.)
• Permission Name: System Alert Window
• Permission State: Grant

5. Save and assign to target device group(s).
6. After a successful deployment, the permission Display over other apps will be enabled.

 

IMPORTANT! Watch a video posted in Zebra DevTalk to learn more about this configuration.

 

 

Refer to Zebra Developers (Pages 18 and 19).

Helpful Information:

• TechDocs: Zebra Managed Configurations
• StageNow: AccessMgr Application Signature File for APK package
• Install Zebra OEMConfig Via Managed Google Play Using Microsoft Intune
• Microsoft: Use and manage Android Enterprise devices with OEMConfig in Microsoft Intune
• Zebra OemConfig Legacy Shema and MX Powered Schema in InTune Endpoint Management Solution