🎤 How to Configure Chrome Microphone Permissions on Samsung A9+ Tablets Managed by Intune
When managing Android Enterprise devices in Microsoft Intune, controlling app-level permissions like microphone access can be confusing — especially for Google Chrome, which doesn’t expose granular runtime permissions directly under standard Intune configuration options. Here’s a complete breakdown of how to fix the issue where Chrome’s microphone permission defaults to “Don’t Allow” on Samsung A9+ tablets.
⚙️ Environment Summary
Device type: Samsung Galaxy Tab A9+
Enrollment type: Android Enterprise (Dedicated / Kiosk mode)
Launcher: Managed Home Screen
Management platform: Microsoft Intune
Issue: Chrome’s microphone permission defaults to “Don’t Allow,” preventing mic usage in web apps or online assessments.
🧩 Understanding the Limitation
By default, Chrome inherits its permission model from Android’s App permission management, not directly through Intune’s “App configuration policies.”
While Intune allows you to manage runtime permissions globally, it doesn’t list Chrome-specific toggles like “Allow while using the app.”
To solve this, you’ll need to combine App configuration, Permission policies, and optionally OEMConfig (Samsung Knox Service Plugin) for fine-grained control.
🛠️ Step-by-Step Configuration in Intune
Step 1: Confirm Android Enterprise Enrollment
Make sure the devices are enrolled as Dedicated devices (Corporate-owned) and running Managed Home Screen (MHS).
You can verify under:
Intune Admin Center → Devices → Android → Enrollment types
Step 2: Create an App Configuration Policy for Chrome
- Go to Apps → App configuration policies → Add → Managed devices
- Select:
- Platform: Android Enterprise
- Profile type: All devices
- Targeted app: com.android.chrome
- Under Configuration settings format, choose Configuration designer
- Add the following Managed configuration entries (these map to Chrome’s app-level permissions):
| Key | Type | Value |
|---|---|---|
Permission:android.permission.RECORD_AUDIO | String | grant |
This key allows Chrome to access the microphone automatically without user interaction.
- Save and assign this policy to the same device group as your Samsung A9+ tablets.
Step 3: Create a Runtime Permission Policy
This ensures apps that request microphone access are automatically granted permission.
- Go to Devices → Configuration profiles → Create profile
- Select:
- Platform: Android Enterprise
- Profile type: Device restrictions
- Under Work profile settings (or Device Owner settings), expand App permissions
- Set the following:
- Default permission policy: Grant automatically
- Permission policy for microphone: Allow only while app is in use
- Assign this configuration to your device group.
Step 4: Use Samsung Knox Service Plugin (KSP) for OEM Overrides (Optional but Recommended)
The Samsung Knox Service Plugin (OEMConfig) can enforce more granular control over app permissions, including microphone settings.
- Install Knox Service Plugin (KSP) via Intune:
- Go to Apps → Android → Add → Managed Google Play app
- Search for and approve Knox Service Plugin
- Create a KSP configuration profile:
- Navigate to Devices → Configuration profiles → Create profile → Android Enterprise → OEMConfig → Knox Service Plugin
- Under the Permissions section, define:
{ "applicationPermissions": { "com.android.chrome": { "android.permission.RECORD_AUDIO": "allow" } } } - Assign this profile to all affected devices.
This ensures Chrome has microphone access automatically and prevents users from changing it.
🧠 Additional Recommendations
- Chrome Policies via JSON:
You can push managed configuration JSON via Intune to enforce consistent Chrome behavior:{ "AudioCaptureAllowed": true, "VideoCaptureAllowed": true }This ensures Chrome allows mic and camera access during web conferencing or testing sessions. - Managed Home Screen Considerations:
Since MHS runs in kiosk mode, ensure Chrome is included in the allowed apps list and not restricted by other policy containers. - Testing Tip:
After deploying the policies, reboot a test device, open Chrome, and navigate to a site like https://mictests.com to confirm microphone access.
🧾 Troubleshooting Checklist
| Problem | Possible Cause | Solution |
|---|---|---|
| Microphone still blocked | App configuration not applied | Verify Chrome’s App Configuration policy in Intune |
| Chrome missing from app list | MHS policy restriction | Add Chrome under Allowed apps |
| Users prompted for mic | Permission policy not enforced | Check Device Restrictions profile – ensure “Grant automatically” is set |
| Mic works for one user but not all | Policy assigned to user group | Switch to device-based assignment |
✅ Summary
By combining Intune App configuration, Device permissions, and optionally Knox Service Plugin, you can centrally enforce microphone access for Chrome on Samsung A9+ tablets.
This setup is ideal for schools or kiosk environments where Chrome needs microphone functionality for classroom tools, voice input, or browser-based testing platforms.
