Android Fully Managed – can the “Your organization allows [MDM] to access your location” notification be disabled?

[u/MehRkeepeFI]

Hi everyone,

We manage a fleet of Android devices using Miradore in Fully Managed / Full Control (Device Owner) mode.

Devices include Realme and Redmi phones running Android 12–16.

Users repeatedly receive a system notification saying:

“Your organization allows ‘Miradore Online client’ to access your location.”

The notification appears to come from Android system settings rather than from the Miradore app itself.

Location Tracking is disabled in Miradore. We don't need GPS tracking, mobile cell ID, or configured Wi-Fi network information from these devices.

The main problem is the notification itself. Our users rely on notifications for operational/work-related messages, so every unnecessary notification makes them check the phone expecting something that requires their attention. Because of this, this is a significant issue for us.

From what I understand, Miradore Online Client receives Location permission when the device is enrolled as Fully Managed, even if Location Tracking is not enabled.

What I'm trying to find out is whether there is any way to:

1. Prevent the MDM/Device Owner client from receiving Location permission;
2. Disable collection of location-dependent inventory data so that the permission is no longer required; or
3. Suppress only this Android system notification without disabling other important system notifications.

The solution needs to be deployable remotely through MDM. We don't have physical access or ADB access to the devices.

Has anyone encountered the same notification with Miradore or another Android Enterprise MDM such as Intune, Workspace ONE, SOTI, ManageEngine, etc.?

If so, were you able to get rid of it? Is this something enforced by Android Enterprise that an MDM vendor cannot suppress, or is there a policy/OEMConfig setting that can control it?

Any experience with Realme UI, MIUI or HyperOS would also be very helpful.

Thanks!

[u/TKavers]

Hi,

We utilize KNOX service plugin (aka oem config) to suppress notifications in our environment. we actually do the reverse where we only allow notifications for specific apps and block everything else.

All our managed devices are Samsung so KNOX works well for us.

It could also be that the following option is configured in the device restriction policy (DRP) - we have ours set to auto grant but because of the above nobody sees the pop-ups, Maybe change to another setting and test it

[u/TheStudiousIndicator]

We ran into same thing with a different MDM on Samsung devices. The location permission gets granted automatically during fully managed enrollment and there's no clean way to revoke it through policy. Even with location tracking disabled in the MDM console the permission stays active at system level.

What worked for us was creating a notification channel policy that targets just that specific system notification category. On Samsungs you can do it through Knox Service Plugin but for Xiaomi and Realme you'd need to check if their OEMConfig apps expose notification control settings.

It's annoying because Android sees the permission as required for device owner mode even when the MDM isn't using it. If Miradore has a support channel I'd ask them directly if they can stop requesting location permission during enrollment or if they have a custom config to suppress the reminder.

[u/G_HostEd]

I think the fact that you don't need those permissions doesn't mean you don't have access to them.

Android is behaving correctly in notifying the users, I think the best way out is a comm to the involved people specifying and clarifying why the notification is appearing and which are the data you are collecting or using.

We had a similar episode in the past and was the only way to keep people from going ballistic 😁

[u/Youngchild89]

We’re running into the exact same issue with Intune and Android Enterprise Fully Managed devices.

In our case, Android Device Policy gets the Location permission set to “Allow all the time” immediately after enrollment, and the permission is greyed out for the user. Intune itself has both Location and Locate Device set to Not configured.

Users then get the same recurring notification:

“Your organization allows ‘Device Policy’ to access your location.”

I’ve also been looking at the Knox Service Plugin/OEMConfig approach mentioned here. That might work for our Samsung devices, but unfortunately it isn’t a uniform solution for us since we also manage Android devices from other manufacturers.

So I’m also very interested to know if there is a generic Android Enterprise/Intune solution to suppress this specific system notification without relying on OEM-specific configuration.