It's too bad the SM app does not automatically enforce those settings from a policy, which would thwart the end-user from modifying those permissions long-term.
I believe from @PaulF's reply that the limitation is from the Android side, not the Meraki side. Unless you know of another MDM solution that does force it?
If my answer solves your problem please click Accept as Solution so others can benefit from it.
