List of Android System Permissions

安卓官方參考文件上搬過來的，安卓系統許可權列表，建議收藏。

值	解釋
ACCEPT_HANDOVER	Allows a calling app to continue a call which was started in another app.
ACCESS_BACKGROUND_LOCATION	Allows an app to access location in the background.
ACCESS_CHECKIN_PROPERTIES	Allows read/write access to the “properties” table in the checkin database, to change values that get uploaded.
ACCESS_COARSE_LOCATION	Allows an app to access approximate location.
ACCESS_FINE_LOCATION	Allows an app to access precise location.
ACCESS_LOCATION_EXTRA_COMMANDS	Allows an application to access extra location provider commands.
ACCESS_MEDIA_LOCATION	Allows an application to access any geographic locations persisted in the user’s shared collection.
ACCESS_NETWORK_STATE	Allows applications to access information about networks.
ACCESS_NOTIFICATION_POLICY	Marker permission for applications that wish to access notification policy.
ACCESS_WIFI_STATE	Allows applications to access information about Wi-Fi networks.
ACCOUNT_MANAGER	Allows applications to call into AccountAuthenticators.
ACTIVITY_RECOGNITION	Allows an application to recognize physical activity.
ADD_VOICEMAIL	Allows an application to add voicemails into the system.
ANSWER_PHONE_CALLS	Allows the app to answer an incoming phone call.
BATTERY_STATS	Allows an application to collect battery statistics
BIND_APPWIDGET	Allows an application to tell the AppWidget service which application can access AppWidget’s data.
BIND_AUTOFILL_SERVICE	Must be required by a AutofillService, to ensure that only the system can bind to it.
BIND_CALL_REDIRECTION_SERVICE	Must be required by a CallRedirectionService, to ensure that only the system can bind to it.
BIND_CARRIER_MESSAGING_CLIENT_SERVICE	A subclass of CarrierMessagingClientService must be protected with this permission.
BIND_CARRIER_MESSAGING_SERVICE	This constant was deprecated in API level 23.
BIND_CHOOSER_TARGET_SERVICE	This constant was deprecated in API level 30.
BIND_CONDITION_PROVIDER_SERVICE	Must be required by a ConditionProviderService, to ensure that only the system can bind to it.
BIND_CONTROLS	Allows SystemUI to request third party controls.
BIND_DEVICE_ADMIN	Must be required by device administration receiver, to ensure that only the system can interact with it.
BIND_DREAM_SERVICE	Must be required by an DreamService, to ensure that only the system can bind to it.
BIND_INCALL_SERVICE	Must be required by a InCallService, to ensure that only the system can bind to it.
BIND_INPUT_METHOD	Must be required by an InputMethodService, to ensure that only the system can bind to it.
BIND_MIDI_DEVICE_SERVICE	Must be required by an MidiDeviceService, to ensure that only the system can bind to it.
BIND_NFC_SERVICE	Must be required by a HostApduService or OffHostApduService to ensure that only the system can bind to it.
BIND_NOTIFICATION_LISTENER_SERVICE	Must be required by an NotificationListenerService, to ensure that only the system can bind to it.
BIND_PRINT_SERVICE	Must be required by a PrintService, to ensure that only the system can bind to it.
BIND_QUICK_ACCESS_WALLET_SERVICE	Must be required by a QuickAccessWalletService to ensure that only the system can bind to it.
BIND_QUICK_SETTINGS_TILE	Allows an application to bind to third party quick settings tiles.
BIND_REMOTEVIEWS	Must be required by a RemoteViewsService, to ensure that only the system can bind to it.
BIND_SCREENING_SERVICE	Must be required by a CallScreeningService, to ensure that only the system can bind to it.
BIND_TELECOM_CONNECTION_SERVICE	Must be required by a ConnectionService, to ensure that only the system can bind to it.
BIND_TEXT_SERVICE	Must be required by a TextService (e.
BIND_TV_INPUT	Must be required by a TvInputService to ensure that only the system can bind to it.
BIND_VISUAL_VOICEMAIL_SERVICE	Must be required by a link VisualVoicemailService to ensure that only the system can bind to it.
BIND_VOICE_INTERACTION	Must be required by a VoiceInteractionService, to ensure that only the system can bind to it.
BIND_VPN_SERVICE	Must be required by a VpnService, to ensure that only the system can bind to it.
BIND_VR_LISTENER_SERVICE	Must be required by an VrListenerService, to ensure that only the system can bind to it.
BIND_WALLPAPER	Must be required by a WallpaperService, to ensure that only the system can bind to it.
BLUETOOTH	Allows applications to connect to paired bluetooth devices.
BLUETOOTH_ADMIN	Allows applications to discover and pair bluetooth devices.
BLUETOOTH_PRIVILEGED	Allows applications to pair bluetooth devices without user interaction, and to allow or disallow phonebook access or message access.
BODY_SENSORS	Allows an application to access data from sensors that the user uses to measure what is happening inside their body, such as heart rate.
BROADCAST_PACKAGE_REMOVED	Allows an application to broadcast a notification that an application package has been removed.
BROADCAST_SMS	Allows an application to broadcast an SMS receipt notification.
BROADCAST_STICKY	Allows an application to broadcast sticky intents.
BROADCAST_WAP_PUSH	Allows an application to broadcast a WAP PUSH receipt notification.
CALL_COMPANION_APP	Allows an app which implements the InCallService API to be eligible to be enabled as a calling companion app.
CALL_PHONE	Allows an application to initiate a phone call without going through the Dialer user interface for the user to confirm the call.
CALL_PRIVILEGED	Allows an application to call any phone number, including emergency numbers, without going through the Dialer user interface for the user to confirm the call being placed.
CAMERA	Required to be able to access the camera device.
CAPTURE_AUDIO_OUTPUT	Allows an application to capture audio output.
CHANGE_COMPONENT_ENABLED_STATE	Allows an application to change whether an application component (other than its own) is enabled or not.
CHANGE_CONFIGURATION	Allows an application to modify the current configuration, such as locale.
CHANGE_NETWORK_STATE	Allows applications to change network connectivity state.
CHANGE_WIFI_MULTICAST_STATE	Allows applications to enter Wi-Fi Multicast mode.
CHANGE_WIFI_STATE	Allows applications to change Wi-Fi connectivity state.
CLEAR_APP_CACHE	Allows an application to clear the caches of all installed applications on the device.
CONTROL_LOCATION_UPDATES	Allows enabling/disabling location update notifications from the radio.
DELETE_CACHE_FILES	Old permission for deleting an app’s cache files, no longer used, but signals for us to quietly ignore calls instead of throwing an exception.
DELETE_PACKAGES	Allows an application to delete packages.
DIAGNOSTIC	Allows applications to RW to diagnostic resources.
DISABLE_KEYGUARD	Allows applications to disable the keyguard if it is not secure.
DUMP	Allows an application to retrieve state dump information from system services.
EXPAND_STATUS_BAR	Allows an application to expand or collapse the status bar.
FACTORY_TEST	Run as a manufacturer test application, running as the root user.
FOREGROUND_SERVICE	Allows a regular application to use Service.
GET_ACCOUNTS	Allows access to the list of accounts in the Accounts Service.
GET_ACCOUNTS_PRIVILEGED	Allows access to the list of accounts in the Accounts Service.
GET_PACKAGE_SIZE	Allows an application to find out the space used by any package.
GET_TASKS	This constant was deprecated in API level 21.
GLOBAL_SEARCH	This permission can be used on content providers to allow the global search system to access their data.
INSTALL_LOCATION_PROVIDER	Allows an application to install a location provider into the Location Manager.
INSTALL_PACKAGES	Allows an application to install packages.
INSTALL_SHORTCUT	Allows an application to install a shortcut in Launcher.
INSTANT_APP_FOREGROUND_SERVICE	Allows an instant app to create foreground services.
INTERACT_ACROSS_PROFILES	Allows interaction across profiles in the same profile group.
INTERNET	Allows applications to open network sockets.
KILL_BACKGROUND_PROCESSES	Allows an application to call ActivityManager.
LOADER_USAGE_STATS	Allows a data loader to read a package’s access logs.
LOCATION_HARDWARE	Allows an application to use location features in hardware, such as the geofencing api.
MANAGE_DOCUMENTS	Allows an application to manage access to documents, usually as part of a document picker.
MANAGE_EXTERNAL_STORAGE	Allows an application a broad access to external storage in scoped storage.
MANAGE_OWN_CALLS	Allows a calling application which manages it own calls through the self-managed ConnectionService APIs.
MASTER_CLEAR	Not for use by third-party applications.
MEDIA_CONTENT_CONTROL	Allows an application to know what content is playing and control its playback.
MODIFY_AUDIO_SETTINGS	Allows an application to modify global audio settings.
MODIFY_PHONE_STATE	Allows modification of the telephony state - power on, mmi, etc.
MOUNT_FORMAT_FILESYSTEMS	Allows formatting file systems for removable storage.
MOUNT_UNMOUNT_FILESYSTEMS	Allows mounting and unmounting file systems for removable storage.
NFC	Allows applications to perform I/O operations over NFC.
NFC_PREFERRED_PAYMENT_INFO	Allows applications to receive NFC preferred payment service information.
NFC_TRANSACTION_EVENT	Allows applications to receive NFC transaction events.
PACKAGE_USAGE_STATS	Allows an application to collect component usage statistics
PERSISTENT_ACTIVITY	This constant was deprecated in API level 15.
PROCESS_OUTGOING_CALLS	This constant was deprecated in API level 29.
QUERY_ALL_PACKAGES	Allows query of any normal app on the device, regardless of manifest declarations.
READ_CALENDAR	Allows an application to read the user’s calendar data.
READ_CALL_LOG	Allows an application to read the user’s call log.
READ_CONTACTS	Allows an application to read the user’s contacts data.
READ_EXTERNAL_STORAGE	Allows an application to read from external storage.
READ_INPUT_STATE	This constant was deprecated in API level 16.
READ_LOGS	Allows an application to read the low-level system log files.
READ_PHONE_NUMBERS	Allows read access to the device’s phone number(s).
READ_PHONE_STATE	Allows read only access to phone state, including the current cellular network information, the status of any ongoing calls, and a list of any PhoneAccounts registered on the device.
READ_PRECISE_PHONE_STATE	Allows read only access to precise phone state.
READ_SMS	Allows an application to read SMS messages.
READ_SYNC_SETTINGS	Allows applications to read the sync settings.
READ_SYNC_STATS	Allows applications to read the sync stats.
READ_VOICEMAIL	Allows an application to read voicemails in the system.
REBOOT	Required to be able to reboot the device.
RECEIVE_BOOT_COMPLETED	Allows an application to receive the Intent.
RECEIVE_MMS	Allows an application to monitor incoming MMS messages.
RECEIVE_SMS	Allows an application to receive SMS messages.
RECEIVE_WAP_PUSH	Allows an application to receive WAP push messages.
RECORD_AUDIO	Allows an application to record audio.
REORDER_TASKS	Allows an application to change the Z-order of tasks.
REQUEST_COMPANION_RUN_IN_BACKGROUND	Allows a companion app to run in the background.
REQUEST_COMPANION_USE_DATA_IN_BACKGROUND	Allows a companion app to use data in the background.
REQUEST_DELETE_PACKAGES	Allows an application to request deleting packages.
REQUEST_IGNORE_BATTERY_OPTIMIZATIONS	Permission an application must hold in order to use Settings.
REQUEST_INSTALL_PACKAGES	Allows an application to request installing packages.
REQUEST_PASSWORD_COMPLEXITY	Allows an application to request the screen lock complexity and prompt users to update the screen lock to a certain complexity level.
RESTART_PACKAGES	This constant was deprecated in API level 15.
SEND_RESPOND_VIA_MESSAGE	Allows an application (Phone) to send a request to other applications to handle the respond-via-message action during incoming calls.
SEND_SMS	Allows an application to send SMS messages.
SET_ALARM	Allows an application to broadcast an Intent to set an alarm for the user.
SET_ALWAYS_FINISH	Allows an application to control whether activities are immediately finished when put in the background.
SET_ANIMATION_SCALE	Modify the global animation scaling factor.
SET_DEBUG_APP	Configure an application for debugging.
SET_PREFERRED_APPLICATIONS	This constant was deprecated in API level 15.
SET_PROCESS_LIMIT	Allows an application to set the maximum number of (not needed) application processes that can be running.
SET_TIME	Allows applications to set the system time directly.
SET_TIME_ZONE	Allows applications to set the system time zone directly.
SET_WALLPAPER	Allows applications to set the wallpaper.
SET_WALLPAPER_HINTS	Allows applications to set the wallpaper hints.
SIGNAL_PERSISTENT_PROCESSES	Allow an application to request that a signal be sent to all persistent processes.
SMS_FINANCIAL_TRANSACTIONS	Allows financial apps to read filtered sms messages.
START_VIEW_PERMISSION_USAGE	Allows the holder to start the permission usage screen for an app.
STATUS_BAR	Allows an application to open, close, or disable the status bar and its icons.
SYSTEM_ALERT_WINDOW	Allows an app to create windows using the type WindowManager.
TRANSMIT_IR	Allows using the device’s IR transmitter, if available.
UNINSTALL_SHORTCUT	Don’t use this permission in your app.
UPDATE_DEVICE_STATS	Allows an application to update device statistics.
USE_BIOMETRIC	Allows an app to use device supported biometric modalities.
USE_FINGERPRINT	This constant was deprecated in API level 28.
USE_SIP	Allows an application to use SIP service.
VIBRATE	Allows access to the vibrator.
WAKE_LOCK	Allows using PowerManager WakeLocks to keep processor from sleeping or screen from dimming.
WRITE_APN_SETTINGS	Allows applications to write the apn settings and read sensitive fields of an existing apn settings like user and password.
WRITE_CALENDAR	Allows an application to write the user’s calendar data.
WRITE_CALL_LOG	Allows an application to write (but not read) the user’s call log data.
WRITE_CONTACTS	Allows an application to write the user’s contacts data.
WRITE_EXTERNAL_STORAGE	Allows an application to write to external storage.
WRITE_GSERVICES	Allows an application to modify the Google service map.
WRITE_SECURE_SETTINGS	Allows an application to read or write the secure system settings.
WRITE_SETTINGS	Allows an application to read or write the system settings.
WRITE_SYNC_SETTINGS	Allows applications to write the sync settings.
WRITE_VOICEMAIL	Allows an application to modify and remove existing voicemails in the system.

配置寫在AndroidManifest.xml檔案中
例如：

<?xml version="1.0" encoding="utf-8"?>
<manifest xmlns:android="http://schemas.android.com/apk/res/android"
          package="com.example.AndroidHelloWorld"
          android:versionCode="1"
          android:versionName="1.0">
    <uses-sdk android:minSdkVersion="10"/>
    <uses-permission android:name="android.permission.WRITE_EXTERNAL_STORAGE"/>
    <uses-permission android:name="android.permission.INTERNET"/>
    <application android:label="@string/app_name">
        <activity android:name="MyActivity"
                  android:label="@string/app_name">
            <intent-filter>
                <action android:name="android.intent.action.MAIN"/>
                <category android:name="android.intent.category.LAUNCHER"/>
            </intent-filter>
        </activity>
    </application>
</manifest>