IBM Support

New App Permission - Usage Access Permission

Troubleshooting


Problem

Starting with Android L (5.0) the feature that had been used in the past to block blocklisted applications on non-SAFE devices was removed, and a new access permission was required in order to maintain this functionality.

MaaS360 for Android version 5.75 adds this permission, but it is not part of the standard activation workflow, and initiates a prompt that some end-users and admins may find confusing.

The setting that MaaS360 needs access to is called "Usage Data Access" This will give MaaS360 the ability to block blocklisted app usage on MDM controlled devices. 

If the device is on an MDM policy with App Compliance settings, the user will get a prompt if it is not enabled, and appear as out of compliance in the portal

Device Out-of-Compliance
Usage Setting - Per App Compliance
Actual Settings - Data Usage per Settings Menu

Symptom

OOC - Portal View
**Please note in the above screenshot that the device is OOC for Policy Compliance, not Compliance Rules.  This indicates the device does not have the permission enabled, but does not actually have a blocklisted app installed.**
The setting itself can be found under the Security Option in the device settings: 
Setting Usage Data Access in PIM App  Usage Data MaaS App Setting

Cause

If app compliance via MDM policies is not in use, but the device still shows OOC, then it is likely that authentication is being enforced on an app distribution.  To check this, open the app in the catalog, and in the device view Security frame, there will be a check box.  Disable if not needed, otherwise users will need to accept the permission
Alternate Reason for Device to be OOC
If this is not a concern for the organization, disabling app compliance rules in the MDM policy will resolve.

Document Location

Worldwide

[{"Business Unit":{"code":"BU059","label":"IBM Software w\/o TPS"},"Product":{"code":"SSYSXX","label":"IBM MaaS360"},"Component":"","Platform":[{"code":"PF003","label":"Android"}],"Version":"All Versions","Edition":"","Line of Business":{"code":"LOB24","label":"Security Software"}}]

Document Information

Modified date:
15 August 2019

UID

ibm10959709