Permissions Guide
This guide explains every permission Ukkin requests and how to manage them effectively.
Permission Philosophy
Ukkin follows the principle of least privilege:
- Only request what's necessary
- Allow granular control
- Explain why each permission is needed
- Work with reduced permissions when possible
System Permissions
Accessibility Service
Purpose: Read screen content and perform automated actions
Used for: - Reading text from apps - Tapping buttons and links - Typing text - Navigating between screens
Without it: - Agents cannot interact with apps - Only chat functionality works
Privacy note: Can see all screen content, but Ukkin only processes what agents need.
Display Over Other Apps
Purpose: Show status indicators and confirmations
Used for: - Floating status indicator - Confirmation dialogs - Quick action buttons
Without it: - Must open Ukkin to see status - Confirmations require app switch
Notifications
Purpose: Send alerts about agent activity
Used for: - Execution complete alerts - Error notifications - Result summaries - Action reminders
Without it: - No proactive alerts - Must check app manually
Storage
Purpose: Save screenshots and export data
Used for: - Saving captured screenshots - Exporting agent data - Storing large files
Without it: - Cannot save screenshots - Cannot export data
Background Activity
Purpose: Run agents when app is closed
Used for: - Scheduled agent execution - Continuous monitoring - Background processing
Without it: - Agents only run when app is open - No scheduled execution
App-Specific Permissions
Per-Agent App Access
Each agent has specific app permissions:
- Open agent settings
- Go to App Access
- See which apps the agent can access
- Toggle individual app access
Adding App Access
When creating an agent:
- Specify which apps it needs
- Review requested access
- Approve or deny
Revoking App Access
Remove access anytime:
- Go to agent settings
- App Access > Select app
- Toggle off
- Agent can no longer access that app
Permission Levels
Read Only
Agent can: - View screen content - Extract text - Take screenshots
Agent cannot: - Tap elements - Type text - Navigate
Read and Interact
Agent can: - Everything in Read Only - Tap buttons and links - Scroll content - Type text
Full Control
Agent can: - Everything in Read and Interact - Navigate between apps - Use hardware buttons - Manage notifications
Blocked Apps
Setting Up Blocklist
Prevent any agent from accessing certain apps:
- Settings > Privacy > Blocked Apps
- Tap Add App
- Select apps to block
- Confirm
Recommended Blocks
Consider blocking:
| App Type | Examples | Reason |
|---|---|---|
| Banking | Chase, PayPal | Financial security |
| Password Managers | 1Password, Bitwarden | Credential protection |
| Health | Health apps | Medical privacy |
| Private Messaging | Signal | Encrypted communication |
Bypass Protection
Blocked apps cannot be accessed even if:
- Agent is in autonomous mode
- You ask Ukkin to access them
- Configuration requests it
Must manually remove from blocklist first.
Permission Requests
When Permissions Are Requested
Ukkin requests permissions:
- On first launch (core permissions)
- When creating agents that need new access
- When features require additional permissions
Handling Requests
When prompted:
- Review - Understand why it's needed
- Decide - Grant or deny
- Adjust Later - Can change in settings
Denying Permissions
If you deny:
- Feature may not work
- Agent may be limited
- Ukkin will explain the impact
Auditing Permissions
View Current Permissions
See all granted permissions:
- Settings > Privacy > Permission Audit
- View by:
- System permissions
- App permissions
- Agent permissions
Permission History
Track permission changes:
- Settings > Privacy > Permission History
- See when permissions were:
- Granted
- Revoked
- Changed
Recommendations
Ukkin may suggest:
- Removing unused permissions
- Blocking sensitive apps
- Reducing agent access
Managing Permissions
System Settings
Access Android/iOS settings:
- Settings > Privacy > System Permissions
- Opens device settings for Ukkin
- Manage at system level
In-App Settings
Configure within Ukkin:
- Settings > Privacy
- Manage:
- Blocked apps
- Default permission levels
- Audit preferences
Per-Agent Settings
Configure individual agents:
- Open agent
- Settings > Permissions
- Customize access for this agent
Permission Best Practices
Start Minimal
Grant minimum permissions initially, add more as needed.
Review Regularly
Check permissions monthly and revoke unused ones.
Use Read-Only
When possible, use read-only agents before granting full control.
Block Sensitive Apps
Add banking and security apps to blocklist proactively.
Audit New Agents
Review permissions carefully when creating new agents.
Troubleshooting
Permission Denied Errors
If agents fail due to permissions:
- Check which permission is missing
- Review why it's needed
- Grant if appropriate
- Retry agent
Can't Access App
If an agent can't interact with an app:
- Check if app is on blocklist
- Verify agent has app access
- Ensure accessibility service is enabled
- Check if app requires special handling
Permissions Reset
If permissions unexpectedly reset:
- Re-enable in system settings
- Restart Ukkin
- May need to reconfigure agents
Next Steps
- Privacy Overview - General privacy information
- Data Protection - How data is secured
- Getting Started Permissions - Initial setup