App permissions

Android apps define their permissions in the AndroidManifest.xml file that is included with the app. Android will prompt the user for app permissions on the initial launch of the app.

Check App Permissions

On macOS check:

aapt dump badging filename.apk

Additionally, you can review the AndroidManifest.xml file to find the allocated permissions for the app.

grep -i "<uses-permission" AndroidManifest.xml

Permissions Table

Number	Permission	Permission Description	Category
1	ACCEPT_HANDOVER	Allows a calling app to continue a call which was started in another app.	Dangerous
2	ACCESS_BACKGROUND_LOCATION	Allows an app to access location in the background.	Dangerous
3	ACCESS_CHECKIN_PROPERTIES	Allows read/write access to the "properties" table in the checkin database, to change values that get uploaded.	Unknown
4	ACCESS_COARSE_LOCATION	Allows an app to access approximate location.	Dangerous
5	ACCESS_FINE_LOCATION	Allows an app to access precise location.	Dangerous
6	ACCESS_LOCATION_EXTRA_COMMANDS	Allows an application to access extra location provider commands.	Normal
7	ACCESS_MEDIA_LOCATION	Allows an application to access any geographic locations persisted in the user's shared collection.	Unknown
8	ACCESS_NETWORK_STATE	Allows applications to access information about networks.	Normal
9	ACCESS_NOTIFICATION_POLICY	Marker permission for applications that wish to access notification policy.	Unknown
10	ACCESS_WIFI_STATE	Allows applications to access information about Wi-Fi networks.	Unknown
11	ACCOUNT_MANAGER	Allows applications to call into AccountAuthenticators.	Signature
12	ACTIVITY_RECOGNITION	Allows an application to recognize physical activity.	Dangerous
13	ADD_VOICEMAIL	Allows an application to add voicemails into the system.	Dangerous
14	ANSWER_PHONE_CALLS	Allows the app to answer an incoming phone call.	Dangerous
15	BATTERY_STATS	Allows an application to collect battery statistics. Protection level: signature	privileged
16	BIND_ACCESSIBILITY_SERVICE	Must be required by an AccessibilityService, to ensure that only the system can bind to it.	Signature
17	BIND_APPWIDGET	Allows an application to tell the AppWidget service which application can access AppWidget's data.	Unknown
18	BIND_AUTOFILL_SERVICE	Must be required by a AutofillService, to ensure that only the system can bind to it.	Signature
19	BIND_CALL_REDIRECTION_SERVICE	Must be required by a CallRedirectionService, to ensure that only the system can bind to it.	Privileged
20	BIND_CARRIER_MESSAGING_CLIENT_SERVICE	A subclass of CarrierMessagingClientService must be protected with this permission.	Unknown
21	BIND_CARRIER_MESSAGING_SERVICE	This constant was deprecated in API level 23. Use BIND_CARRIER_SERVICES instead	Unknown
22	BIND_CARRIER_SERVICES	The system process that is allowed to bind to services in carrier apps will have this permission.	Unknown
23	BIND_CHOOSER_TARGET_SERVICE	This constant was deprecated in API level R.	Unknown
24	BIND_CONDITION_PROVIDER_SERVICE	Must be required by a ConditionProviderService, to ensure that only the system can bind to it.	Unknown
25	BIND_CONTROLS	Allows SystemUI to request third party controls.	Unknown
26	BIND_DEVICE_ADMIN	Must be required by device administration receiver, to ensure that only the system can interact with it.	Signature
27	BIND_DREAM_SERVICE	Must be required by an DreamService, to ensure that only the system can bind to it.	Unknown
28	BIND_INCALL_SERVICE	Must be required by a InCallService, to ensure that only the system can bind to it.	Unknown
29	BIND_INPUT_METHOD	Must be required by an InputMethodService, to ensure that only the system can bind to it.	Signature
30	BIND_MIDI_DEVICE_SERVICE	Must be required by an MidiDeviceService, to ensure that only the system can bind to it.	Signature
31	BIND_NFC_SERVICE	Must be required by a HostApduService or OffHostApduService to ensure that only the system can bind to it.	Signature
32	BIND_NOTIFICATION_LISTENER_SERVICE	Must be required by an NotificationListenerService, to ensure that only the system can bind to it.	Unknown
33	BIND_PRINT_SERVICE	Must be required by a PrintService, to ensure that only the system can bind to it.	Signature
34	BIND_QUICK_ACCESS_WALLET_SERVICE	Must be required by a QuickAccessWalletService to ensure that only the system can bind to it.	Unknown
35	BIND_QUICK_SETTINGS_TILE	Allows an application to bind to third party quick settings tiles.	Signature
36	BIND_REMOTEVIEWS	Must be required by a RemoteViewsService, to ensure that only the system can bind to it.	Unknown
37	BIND_SCREENING_SERVICE	Must be required by a CallScreeningService, to ensure that only the system can bind to it.	Privileged
38	BIND_TELECOM_CONNECTION_SERVICE	Must be required by a ConnectionService, to ensure that only the system can bind to it.	Privileged
39	BIND_TEXT_SERVICE	Must be required by a TextService (e.g. SpellCheckerService) to ensure that only the system can bind to it.	Signature
40	BIND_TV_INPUT	Must be required by a TvInputService to ensure that only the system can bind to it.	Privileged
41	BIND_VISUAL_VOICEMAIL_SERVICE	Must be required by a link VisualVoicemailService to ensure that only the system can bind to it.	Privileged
42	BIND_VOICE_INTERACTION	Must be required by a VoiceInteractionService, to ensure that only the system can bind to it.	Signature
43	BIND_VPN_SERVICE	Must be required by a VpnService, to ensure that only the system can bind to it.	Signature
44	BIND_VR_LISTENER_SERVICE	Must be required by an VrListenerService, to ensure that only the system can bind to it.	Unknown
45	BIND_WALLPAPER	Must be required by a WallpaperService, to ensure that only the system can bind to it.	Privileged
46	BLUETOOTH	Allows applications to connect to paired bluetooth devices.	Normal
47	BLUETOOTH_ADMIN	Allows applications to discover and pair bluetooth devices.	Normal
48	BLUETOOTH_PRIVILEGED	Allows applications to pair bluetooth devices without user interaction, and to allow or disallow phonebook access or message access.	Privileged
49	BODY_SENSORS	Allows an application to access data from sensors that the user uses to measure what is happening inside his/her body, such as heart rate.	Unknown
50	BROADCAST_PACKAGE_REMOVED	Allows an application to broadcast a notification that an application package has been removed.	Unknown
51	BROADCAST_SMS	Allows an application to broadcast an SMS receipt notification.	Unknown
52	BROADCAST_STICKY	Allows an application to broadcast sticky intents.	Normal
53	BROADCAST_WAP_PUSH	Allows an application to broadcast a WAP PUSH receipt notification.	Unknown
54	CALL_COMPANION_APP	Allows an app which implements the InCallService API to be eligible to be enabled as a calling companion app.	Dangerous
55	CALL_PHONE	Allows an application to initiate a phone call without going through the Dialer user interface for the user to confirm the call.	Dangerous
56	CALL_PRIVILEGED	Allows an application to call any phone number, including emergency numbers, without going through the Dialer user interface for the user to confirm the call being placed.	Unknown
57	CAMERA	Required to be able to access the camera device.	Dangerous
58	CAPTURE_AUDIO_OUTPUT	Allows an application to capture audio output.	Privileged
59	CHANGE_COMPONENT_ENABLED_STATE	Allows an application to change whether an application component (other than its own) is enabled or not.	Privileged
60	CHANGE_CONFIGURATION	Allows an application to modify the current configuration, such as locale.	Privileged
61	CHANGE_NETWORK_STATE	Allows applications to change network connectivity state.	Normal
62	CHANGE_WIFI_MULTICAST_STATE	Allows applications to enter Wi-Fi Multicast mode.	Normal
63	CHANGE_WIFI_STATE	Allows applications to change Wi-Fi connectivity state.	Normal
64	CLEAR_APP_CACHE	Allows an application to clear the caches of all installed applications on the device.	Privileged
65	CONTROL_LOCATION_UPDATES	Allows enabling/disabling location update notifications from the radio.	Privileged
66	DELETE_CACHE_FILES	Old permission for deleting an app's cache files, no longer used, but signals for us to quietly ignore calls instead of throwing an exception.	Unknown
67	DELETE_PACKAGES	Allows an application to delete packages.	Privileged
68	DIAGNOSTIC	Allows applications to RW to diagnostic resources.	Signature
69	DISABLE_KEYGUARD	Allows applications to disable the keyguard if it is not secure.	Normal
70	DUMP	Allows an application to retrieve state dump information from system services.	Privileged
71	EXPAND_STATUS_BAR	Allows an application to expand or collapse the status bar.	Normal
72	FACTORY_TEST	Run as a manufacturer test application, running as the root user.	Signature
73	FOREGROUND_SERVICE	Allows a regular application to use Service.startForeground.	Normal
74	GET_ACCOUNTS	Allows access to the list of accounts in the Accounts Service.	Dangerous
75	GET_ACCOUNTS_PRIVILEGED	Allows access to the list of accounts in the Accounts Service.	Privileged
76	GET_PACKAGE_SIZE	Allows an application to find out the space used by any package.	Normal
77	GET_TASKS	This constant was deprecated in API level 21. No longer enforced.	Normal
78	GLOBAL_SEARCH	This permission can be used on content providers to allow the global search system to access their data.	Privileged
79	INSTALL_LOCATION_PROVIDER	Allows an application to install a location provider into the Location Manager.	Privileged
80	INSTALL_PACKAGES	Allows an application to install packages.	Signature
81	INSTALL_SHORTCUT	Allows an application to install a shortcut in Launcher.	Normal
82	INSTANT_APP_FOREGROUND_SERVICE	Allows an instant app to create foreground services.	Signature
83	INTERACT_ACROSS_PROFILES	Allows interaction across profiles in the same profile group.	Privileged
84	INTERNET	Allows applications to open network sockets.	Normal
85	KILL_BACKGROUND_PROCESSES	Allows an application to call ActivityManager.killBackgroundProcesses(String).	Normal
86	LOADER_USAGE_STATS	Allows a data loader to read a package's access logs.	Unknown
87	LOCATION_HARDWARE	Allows an application to use location features in hardware, such as the geofencing api.	Privileged
88	MANAGE_DOCUMENTS	Allows an application to manage access to documents, usually as part of a document picker.	Signature
89	MANAGE_EXTERNAL_STORAGE	Allows an application a broad access to external storage in scoped storage.	Unknown
90	MANAGE_OWN_CALLS	Allows a calling application which manages it own calls through the self-managed ConnectionService APIs.	Normal
91	MASTER_CLEAR	Not for use by third-party applications.	Privileged
92	MEDIA_CONTENT_CONTROL	Allows an application to know what content is playing and control its playback.	Privileged
93	MODIFY_AUDIO_SETTINGS	Allows an application to modify global audio settings.	Normal
94	MODIFY_PHONE_STATE	Allows modification of the telephony state - power on, mmi, etc.	Privileged
95	MOUNT_FORMAT_FILESYSTEMS	Allows formatting file systems for removable storage.	Privileged
96	MOUNT_UNMOUNT_FILESYSTEMS	Allows mounting and unmounting file systems for removable storage.	Privileged
97	NFC	Allows applications to perform I/O operations over NFC.	Normal
98	NFC_PREFERRED_PAYMENT_INFO	Allows applications to receive NFC preferred payment service information.	Normal
99	NFC_TRANSACTION_EVENT	Allows applications to receive NFC transaction events.	Normal
100	PACKAGE_USAGE_STATS	Allows an application to collect component usage statistics. Declaring the permission implies intention to use the API and the user of the device can grant permission through the Settings application.	Unknown
101	PERSISTENT_ACTIVITY	This constant was deprecated in API level 15. This functionality will be removed in the future; please do not use. Allow an application to make its activities persistent.	Unknown
102	PROCESS_OUTGOING_CALLS	This constant was deprecated in API level 29. Applications should use CallRedirectionService instead of the Intent.ACTION_NEW_OUTGOING_CALL broadcast.	Dangerous
103	QUERY_ALL_PACKAGES	Allows query of any normal app on the device, regardless of manifest declarations.	Unknown
104	READ_CALENDAR	Allows an application to read the user's calendar data.	Dangerous
105	READ_CALL_LOG	Allows an application to read the user's call log.	Dangerous
106	READ_CONTACTS	Allows an application to read the user's contacts data.	Dangerous
107	READ_EXTERNAL_STORAGE	Allows an application to read from external storage.	Dangerous
108	READ_INPUT_STATE	This constant was deprecated in API level 16. The API that used this permission has been removed.	Signature
109	READ_LOGS	Allows an application to read the low-level system log files.	Privileged
110	READ_PHONE_NUMBERS	Allows read access to the device's phone number(s).	Dangerous
111	READ_PHONE_STATE	Allows read only access to phone state, including the phone number of the device, current cellular network information, the status of any ongoing calls, and a list of any PhoneAccounts registered on the device.	Normal
112	READ_PRECISE_PHONE_STATE	Allows read only access to precise phone state.	Privileged
113	READ_SMS	Allows an application to read SMS messages.	Dangerous
114	READ_SYNC_SETTINGS	Allows applications to read the sync settings.	Normal
115	READ_SYNC_STATS	Allows applications to read the sync stats.	Normal
116	READ_VOICEMAIL	Allows an application to read voicemails in the system.	Privileged
117	REBOOT	Required to be able to reboot the device.	Privileged
118	RECEIVE_BOOT_COMPLETED	Allows an application to receive the Intent.ACTION_BOOT_COMPLETED that is broadcast after the system finishes booting.	Normal
119	RECEIVE_MMS	Allows an application to monitor incoming MMS messages.	Dangerous
120	RECEIVE_SMS	Allows an application to receive SMS messages.	Dangerous
121	RECEIVE_WAP_PUSH	Allows an application to receive WAP push messages.	Dangerous
122	RECORD_AUDIO	Allows an application to record audio.	Dangerous
123	REORDER_TASKS	Allows an application to change the Z-order of tasks.	Normal
124	REQUEST_COMPANION_RUN_IN_BACKGROUND	Allows a companion app to run in the background.	Normal
125	REQUEST_COMPANION_USE_DATA_IN_BACKGROUND	Allows a companion app to use data in the background.	Normal
126	REQUEST_DELETE_PACKAGES	Allows an application to request deleting packages.	Normal
127	REQUEST_IGNORE_BATTERY_OPTIMIZATIONS	Permission an application must hold in order to use Settings.ACTION_REQUEST_IGNORE_BATTERY_OPTIMIZATIONS.	Normal
128	REQUEST_INSTALL_PACKAGES	Allows an application to request installing packages.	Signature
129	REQUEST_PASSWORD_COMPLEXITY	Allows an application to request the screen lock complexity and prompt users to update the screen lock to a certain complexity level.	Normal
130	RESTART_PACKAGES	This constant was deprecated in API level 15. The ActivityManager.restartPackage(String) API is no longer supported.	Normal
131	SEND_RESPOND_VIA_MESSAGE	Allows an application (Phone) to send a request to other applications to handle the respond-via-message action during incoming calls.	Privileged
132	SEND_SMS	Allows an application to send SMS messages.	Dangerous
133	SET_ALARM	Allows an application to broadcast an Intent to set an alarm for the user.	Normal
134	SET_ALWAYS_FINISH	Allows an application to control whether activities are immediately finished when put in the background.	Privileged
135	SET_ANIMATION_SCALE	Modify the global animation scaling factor.	Privileged
136	SET_DEBUG_APP	Configure an application for debugging.	Privileged
137	SET_PREFERRED_APPLICATIONS	This constant was deprecated in API level 15. No longer useful, see PackageManager.addPackageToPreferred(String) for details.	Signature
138	SET_PROCESS_LIMIT	Allows an application to set the maximum number of (not needed) application processes that can be running.	Privileged
139	SET_TIME	Allows applications to set the system time directly.	Privileged
140	SET_TIME_ZONE	Allows applications to set the system time zone directly.	Privileged
141	SET_WALLPAPER	Allows applications to set the wallpaper.	Normal
142	SET_WALLPAPER_HINTS	Allows applications to set the wallpaper hints.	Normal
143	SIGNAL_PERSISTENT_PROCESSES	Allow an application to request that a signal be sent to all persistent processes.	Privileged
144	SMS_FINANCIAL_TRANSACTIONS	Allows financial apps to read filtered sms messages.	Signature
145	START_VIEW_PERMISSION_USAGE	Allows the holder to start the permission usage screen for an app.	Signature
146	STATUS_BAR	Allows an application to open, close, or disable the status bar and its icons.	Privileged
147	SYSTEM_ALERT_WINDOW	Allows an app to create windows using the type WindowManager.LayoutParams.TYPE_APPLICATION_OVERLAY, shown on top of all other apps.	Signature
148	TRANSMIT_IR	Allows using the device's IR transmitter, if available.	Normal
149	UNINSTALL_SHORTCUT	Don't use this permission in your app.	Normal
150	UPDATE_DEVICE_STATS	Allows an application to update device statistics.	Privileged
151	USE_BIOMETRIC	Allows an app to use device supported biometric modalities.	Normal
152	USE_FINGERPRINT	This constant was deprecated in API level 28. Applications should request USE_BIOMETRIC instead	Normal
153	USE_FULL_SCREEN_INTENT	Required for apps targeting Build.VERSION_CODES.Q that want to use notification full screen intents.	Normal
154	USE_SIP	Allows an application to use SIP service.	Dangerous
155	VIBRATE	Allows access to the vibrator.	Normal
156	WAKE_LOCK	Allows using PowerManager WakeLocks to keep processor from sleeping or screen from dimming.	Normal
157	WRITE_APN_SETTINGS	Allows applications to write the apn settings and read sensitive fields of an existing apn settings like user and password.	Privileged
158	WRITE_CALENDAR	Allows an application to write the user's calendar data.	Dangerous
159	WRITE_CALL_LOG	Allows an application to write (but not read) the user's call log data.	Dangerous
160	WRITE_CONTACTS	Allows an application to write the user's contacts data.	Dangerous
161	WRITE_EXTERNAL_STORAGE	Allows an application to write to external storage.	Dangerous
162	WRITE_GSERVICES	Allows an application to modify the Google service map.	Privileged
163	WRITE_SECURE_SETTINGS	Allows an application to read or write the secure system settings.	Privileged
164	WRITE_SETTINGS	Allows an application to read or write the system settings.	Signature
165	WRITE_SYNC_SETTINGS	Allows applications to write the sync settings.	Normal
166	WRITE_VOICEMAIL	Allows an application to modify and remove existing voicemails in the system.	Privileged
167	USE_CREDENTIALS	Used prior to Android 6.0. Allows the app to request authentication tokens.	Deprecated
168	READ_PROFILE	Allows the app to read profile information stored on the device, such as username and contact information.	Unknown