Delegated Device Admin mode

Requirements and Features

  • Requires Android 9+
  • Need to install other apps and use adb to set it as Device owner
  • Multi-user support depends on the Device owner app

Background

Delegated Device Admin mode is a new working mode that App Ops has added since v2.9.0. Starting with Android 9, Device admin apps can modify appops settings, but the system limits the ability to set only one app as a Device admin on a device. Therefore, the App Ops app chooses to use APIs provided by other Device admin apps.

From v2.9.0, App Ops supports Device admin apps using Delegated Scopes Manager.

From v2.9.8, App Ops supports another API provided by Island app.

Disclaimer

The Device admin app you need to install is not developed by us.

Device admin have somewhat problems with Samsung devices and many devices from mainland China. Please be sure to read the help provided by the Device admin app. If you can't accept possible problems, please don't use them.

Samsung devices may cause irreparable results after using the Device admin (see Document from IceBox), please be cautious.

How to use

The setup process requires a computer to be use adb, but only needs to be set once.

1. Install and set up the Device admin app

IceBox

  1. Download from Google Play or Coolapk
  2. See Help to set up Device admin mode for it

小黑屋 (Simplified Chinese only)

  1. Download from Google Play or Coolapk
  2. See Help (Simplified Chinese only) to set up Device admin mode for it

Island

  1. Download from Google Play or Coolapk
  2. See Help to set up Device admin mode for it (Island call it "God mode")

2. Granting permissions

In the "Settings" - "Working Mode" of App Ops, select "Delegated Device Admin mode" and return to the app list. The authorization dialog from the Device admin app should pop up. Please check "change app ops" and confirm.

Next, you'll also need to grant App Ops the "get app ops" permission using adb. Use the following command:

adb shell pm grant --user 0 rikka.appops android.permission.GET_APP_OPS_STATS

Note that if you install the App Ops app in other users, you need to replace the 0 of --user 0 with the id of the other user (use adb shell pm list users you will see results like UserInfo{0:Owner:13} running, 0 from it is the user id).

3. Granting multi-user permissions

For multi-user support, you also need to execute the following command to allow App Ops to partially access other users:

adb shell pm grant --user 0 rikka.appops android.permission.INTERACT_ACROSS_USERS

Currently only Island 3.8+ supports multiple users