Manifest.permission

Summary

Constants

Allows an application to retrieve the sensor security strengths of the biometric sensors.

Allows read/write access to the "properties" table in the checkin database, to change values that get uploaded.

Allows applications to access profiles with android.content.pm.UserProperties#PROFILE_API_VISIBILITY_HIDDEN user property, e.g.

This permission protects a content provider within home/launcher applications, enabling management of home screen metadata such as shortcut placement, launch intents, and labels.

Allows an application to access any geographic locations persisted in the user's shared collection.

Must be required by an AccessibilityService, to ensure that only the system can bind to it.

Allows an application to tell the AppWidget service which application can access AppWidget's data.

Must be required by an AppFunctionService, to ensure that only the system can bind to it.

Must be required by a AutofillService, to ensure that only the system can bind to it.

Must be required by a CallRedirectionService, to ensure that only the system can bind to it.

The system process that is allowed to bind to services in carrier apps will have this permission.

This constant was deprecated in API level 30. For publishing direct share targets, please follow the instructions in https://developer.android.com/training/sharing/receive.html#providing-direct-share-targets instead.

Must be required by any CompanionDeviceServices to ensure that only the system can bind to it.

Must be required by a CredentialProviderService to ensure that only the system can bind to it.

Allows the system to bind to an application's data migration service for Private Compute.

Must be required by device administration receiver, to ensure that only the system can interact with it.

Must be required by an DreamService, to ensure that only the system can bind to it.

Must be required by a InCallService, to ensure that only the system can bind to it.

Must be required by an InputMethodService, to ensure that only the system can bind to it.

Must be required by an MidiDeviceService, to ensure that only the system can bind to it.

Must be required by a PrintService, to ensure that only the system can bind to it.

Must be required by a RemoteViewsService, to ensure that only the system can bind to it.

Must be required by a CallScreeningService, to ensure that only the system can bind to it.

Must be required by a ConnectionService, to ensure that only the system can bind to it.

Must be required by a TextService (e.g. SpellCheckerService) to ensure that only the system can bind to it.

Must be required by a android.media.tv.ad.TvAdService to ensure that only the system can bind to it.

Must be required by a TvInputService to ensure that only the system can bind to it.

Must be required by a TvInteractiveAppService to ensure that only the system can bind to it.

Must be required by a link VisualVoicemailService to ensure that only the system can bind to it.

Must be required by a VoiceInteractionService, to ensure that only the system can bind to it.

Must be required by a VpnService, to ensure that only the system can bind to it.

Must be required by an VrListenerService, to ensure that only the system can bind to it.

Must be required by a WallpaperService, to ensure that only the system can bind to it.

Allows applications to pair bluetooth devices without user interaction, and to allow or disallow phonebook access or message access.

Allows an application to access data from sensors that the user uses to measure what is happening inside their body, such as heart rate.

Allows an application to broadcast a notification that an application package has been removed.

Allows an app which implements the InCallService API to be eligible to be enabled as a calling companion app.

Allows an application to initiate a phone call without going through the Dialer user interface for the user to confirm the call.

Allows an application to call any phone number, including emergency numbers, without going through the Dialer user interface for the user to confirm the call being placed.

Allows the currently focused application to be able to consume keys before Android system get chance to process system keys and shortcuts.

Allows an application to change whether an application component (other than its own) is enabled or not.

Allows an application to clear the caches of all installed applications on the device.

Allows a browser to invoke the set of query apis to get metadata about credential candidates prepared during the CredentialManager.prepareGetCredential API.

Allows specifying candidate credential providers to be queried in Credential Manager get flows, or to be preferred as a default in the Credential Manager create flows.

Old permission for deleting an app's cache files, no longer used, but signals for us to quietly ignore calls instead of throwing an exception.

Allows an application to get notified when a screen capture of its windows is attempted.

Allows an assistive application to perform actions on behalf of users inside of applications.

Allows an application to perform actions on behalf of users inside of applications.

Allows a regular application to use Service.startForeground with the type "connectedDevice".

Allows a regular application to use Service.startForeground with the type "mediaProcessing".

Allows a regular application to use Service.startForeground with the type "mediaProjection".

Allows a regular application to use Service.startForeground with the type "remoteMessaging".

Allows a regular application to use Service.startForeground with the type "systemExempted".

This permission can be used on content providers to allow the global search system to access their data.

Allows an app to prevent non-system-overlay windows from being drawn on top of it

Allows an application to use location features in hardware, such as the geofencing api.

Allows an application to set device policies outside the current user that are required for securing device ownership without accessing user data.

Allows an application to set device policies outside the current user that are critical for securing data within the current user.

Allows an application to set policy related to sending assist content to a privileged app such as the Assistant app.

Allows an application to set policy related to restricting a user's ability to use or enable and disable the camera.

Allows an application to lock a profile or the device with the appropriate cross-user permission.

Allows an application to set policy related to subscriptions downloaded by an admin.

Allows an application to set policy related to restricting a user's ability to use or enable and disable the microphone.

Allows an application to manage policy related to the Memory Tagging Extension (MTE).

Allows an application to set policy related to nearby communications (e.g. Beam and nearby streaming).

Allows an application to set policy related to interacting with profiles (e.g. Disallowing cross-profile copy and paste).

Allows an application to force set a new device unlock password or a managed profile challenge on current user.

Allows an application to set policy related to restricting the user from configuring private DNS.

Allows an application to set the grant state of runtime permissions on packages.

Allows an application to set policy related to the usage of the contents of the screen.

Allows an application to set support messages for when a user action is affected by an active policy.

Allows an application to manage access to documents, usually as part of a document picker.

Allows an application to modify and delete media files on this device or any connected storage device without user confirmation.

Allows a calling application which manages its own calls through the self-managed ConnectionService APIs.

Allows applications to get notified when a Wi-Fi interface request cannot be satisfied without tearing down one or more other interfaces, and provide a decision whether to approve the request or reject it.

This permission is used to let OEMs grant their trusted app access to a subset of privileged wifi APIs to improve wifi performance.

Allows an application to modify any wifi configuration, even if created by another application.

Declaring the permission implies intention to use the API and the user of the device can grant permission through the Settings application.

This constant was deprecated in API level 15. This functionality will be removed in the future; please do not use. Allow an application to make its activities persistent.

Allows an application to act as Private Compute Services, which allows the application to communicate with Private Compute Core components.

Allows an application to be able to store and retrieve credentials from a remote device.

Allows query of any normal app on the device, regardless of manifest declarations.

Allows an application to query over global data in AppSearch that's visible to the ASSISTANT role.

Allows read only access to phone state with a non dangerous permission, including the information like cellular network type, software version.

Allows an application to read the aggregated color zones on the screen for use cases like TV ambient backlight usages.

Allows an application to query over global data in AppSearch that's visible to the HOME role.

This constant was deprecated in API level 16. The API that used this permission has been removed.

Allows an application to read image or video files from external storage that a user has selected via the permission prompt photo picker.

Allows read access to the device's phone number(s), which is exposed to instant applications.

Allows read only access to phone state, including the current cellular network information, the status of any ongoing calls, and a list of any PhoneAccounts registered on the device.

Allows an application to access the Settings Preference services to read settings exposed by the system Settings app and system apps that contribute settings surfaced by the Settings app.

Allows an application to receive the Intent.ACTION_BOOT_COMPLETED that is broadcast after the system finishes booting.

Allows apps with a NotificationListenerService to receive notifications with sensitive information

Apps with a NotificationListenerService without this permission will not be able to view certain types of sensitive information contained in notifications

This permission also allows apps with the SMS permissions to query and receive broadcasts about SMS messages that contain One Time Passwords

Allows an application to programmatically move and resize its tasks when the system is in a state that allows such operations, e.g. in a desktop-like environment.

Allows app to request to be associated with a device via CompanionDeviceManager as "glasses"

Allows app to request to be associated with a device via CompanionDeviceManager as a "watch"

Allows an application to subscribe to notifications about the presence status change of their associated companion device

Allows an application to subscribe to notifications about the nearby devices' presence status change base on the UUIDs.

Allows an application to request the screen lock complexity and prompt users to update the screen lock to a certain complexity level.

Allows an application (Phone) to send a request to other applications to handle the respond-via-message action during incoming calls.

Allows an application to control whether activities are immediately finished when put in the background.

Allows an application to set the advanced features on BiometricDialog (SystemUI), including logo, logo description, and content view with more options button.

Allows an application to set the maximum number of (not needed) application processes that can be running.

Allow an application to request that a signal be sent to all persistent processes.

This constant was deprecated in API level 31. The API that used this permission is no longer functional.

Allows an application to start foreground services from the background at any time.

Allows an application to subscribe to device locked and keyguard locked (i.e., showing) state.

Allows an app to enter Picture-in-Picture mode when the user is not explicitly requesting it.

Allows apps to use exact alarms just like with SCHEDULE_EXACT_ALARM but without needing to request this permission from the user.

This constant was deprecated in API level 28. Applications should request USE_BIOMETRIC instead

Allows to read device identifiers and use ICC based authentication like EAP-AKA.

Allows an app use location button, which grants temporary location permission when a user clicks the button.

Required to be able to interact with other applications via IP packets on the loopback interface.

Allows using PowerManager WakeLocks to keep processor from sleeping or screen from dimming.

Allows applications to write the apn settings and read sensitive fields of an existing apn settings like user and password.

Allows an application to access the Settings Preference services to write settings values exposed by the system Settings app and system apps that contribute settings surfaced in the Settings app.

Constants

Public constructors
`permission()`

READ_EXTERNAL_STORAGE

Added in API level 16

public static final String READ_EXTERNAL_STORAGE

Allows an application to read from external storage.

Note: Starting in API level 33, this permission has no effect. If your app accesses other apps' media files, request one or more of these permissions instead: READ_MEDIA_IMAGES, READ_MEDIA_VIDEO, READ_MEDIA_AUDIO. Learn more about the storage permissions that are associated with media files.

This permission is enforced starting in API level 19. Before API level 19, this permission is not enforced and all apps still have access to read from external storage. You can test your app with the permission enforced by enabling Protect USB storage under Developer options in the Settings app on a device running Android 4.1 or higher.

Also starting in API level 19, this permission is not required to read or write files in your application-specific directories returned by Context.getExternalFilesDir(String) and Context.getExternalCacheDir().

Starting in API level 29, apps don't need to request this permission to access files in their app-specific directory on external storage, or their own files in the MediaStore. Apps shouldn't request this permission unless they need to access other apps' files in the MediaStore. Read more about these changes in the scoped storage section of the developer documentation.

If both your minSdkVersion and targetSdkVersion values are set to 3 or lower, the system implicitly grants your app this permission. If you don't need this permission, be sure your targetSdkVersion is 4 or higher.

This is a soft restricted permission which cannot be held by an app it its full form until the installer on record allowlists the permission. Specifically, if the permission is allowlisted the holder app can access external storage and the visual and aural media collections while if the permission is not allowlisted the holder app can only access to the visual and aural medial collections. Also the permission is immutably restricted meaning that the allowlist state can be specified only at install time and cannot change until the app is installed. For more details see PackageInstaller.SessionParams.setWhitelistedRestrictedPermissions(Set).

Protection level: dangerous

Constant Value: "android.permission.READ_EXTERNAL_STORAGE"

java.lang.Object
↳	android.Manifest.permission

Manifest.permission

Summary

Constants

Public constructors

Inherited methods

Constants

ACCEPT_HANDOVER

ACCESS_BACKGROUND_LOCATION

ACCESS_BIOMETRIC_SENSOR_STRENGTHS

ACCESS_BLOBS_ACROSS_USERS

ACCESS_CHECKIN_PROPERTIES

ACCESS_COARSE_LOCATION

ACCESS_FINE_LOCATION

ACCESS_HIDDEN_PROFILES

ACCESS_LAUNCHER_DATA

ACCESS_LOCAL_NETWORK

ACCESS_LOCATION_EXTRA_COMMANDS

ACCESS_MEDIA_LOCATION

ACCESS_NETWORK_STATE

ACCESS_NOTIFICATION_POLICY

ACCESS_WIFI_STATE

ACCOUNT_MANAGER

ACTIVITY_RECOGNITION

ADD_VOICEMAIL

ANSWER_PHONE_CALLS

APPLY_PICTURE_PROFILE

BATTERY_STATS

BIND_ACCESSIBILITY_SERVICE

BIND_ALTERNATIVE_MESSAGE_TRANSPORT_SERVICE

BIND_APPWIDGET

BIND_APP_FUNCTION_SERVICE

BIND_AUTOFILL_SERVICE

BIND_CALL_REDIRECTION_SERVICE

BIND_CARRIER_MESSAGING_CLIENT_SERVICE

BIND_CARRIER_MESSAGING_SERVICE

BIND_CARRIER_SERVICES

BIND_CHOOSER_TARGET_SERVICE

BIND_COMPANION_DEVICE_SERVICE

BIND_CONDITION_PROVIDER_SERVICE

BIND_CONTROLS

BIND_CREDENTIAL_PROVIDER_SERVICE

BIND_DATA_MIGRATION_FOR_PRIVATECOMPUTE

BIND_DEVICE_ADMIN

BIND_DREAM_SERVICE

BIND_INCALL_SERVICE

BIND_INPUT_METHOD

BIND_MIDI_DEVICE_SERVICE

BIND_NFC_SERVICE

BIND_NOTIFICATION_LISTENER_SERVICE

BIND_PRINT_SERVICE

BIND_QUICK_ACCESS_WALLET_SERVICE

BIND_QUICK_SETTINGS_TILE

BIND_REMOTEVIEWS

BIND_SCREENING_SERVICE

BIND_TELECOM_CONNECTION_SERVICE

BIND_TEXT_SERVICE

BIND_TV_AD_SERVICE

BIND_TV_INPUT

BIND_TV_INTERACTIVE_APP

BIND_VISUAL_VOICEMAIL_SERVICE

BIND_VOICE_INTERACTION

BIND_VPN_SERVICE

BIND_VR_LISTENER_SERVICE

BIND_WALLPAPER

BLUETOOTH

BLUETOOTH_ADMIN

BLUETOOTH_ADVERTISE

BLUETOOTH_CONNECT

BLUETOOTH_PRIVILEGED

BLUETOOTH_SCAN

BODY_SENSORS

BODY_SENSORS_BACKGROUND

BROADCAST_PACKAGE_REMOVED

BROADCAST_SMS

BROADCAST_STICKY

BROADCAST_WAP_PUSH

CALL_COMPANION_APP

CALL_PHONE

CALL_PRIVILEGED

CAMERA