harmony 鸿蒙Access Token Manager

2025-06-12
浏览 (3)

Access Token Manager

Access Token Manager (atm) is a tool used to query and set the information such as permission and usage type of an application process. It provides the capability of access control based on the token ID, bundle name, and process name.

Environment Setup

Before using this tool, you must obtain hdc and run the hdc shell command.

Commands

Command	Description
help	Displays the commands supported by the atm tool.
perm	Grants or revokes a permission for an application process.
toggle	Sets or obtains the toggle status of the permission dialog box or permission usage records. This command is available only for the root version.
dump	Obtains access control data.

help

# Display the help information.
atm help

perm

atm perm [-h] [-g -i <token-id> -p <permission-name>] [-c -i <token-id> -p <permission-name>]

Parameters of the perm command |Parameter |Description | |————————————————–|———————-| |-h |Displays help information.|Commands supported by the atm perm command.| |-g -i <token-id> -p <permission-name>|Grants a specified permission to an application based on the token ID of the application process. The -g, -i, and -p parameters are mandatory. The return value indicates whether the operation is successful. | |-c -i <token-id> -p <permission-name>|Cancels a specified permission for an application based on the token ID of the application process. The -c, -i, and -p parameters are mandatory. The return value indicates whether the operation is successful. |

Example:

# Display the help information about the atm perm command.
atm perm -h

# Grant the camera permission to an application process.
atm perm -g -i ********* -p ohos.permission.CAMERA

# Revoke the camera permission for an application process.
atm perm -c -i ********* -p ohos.permission.CAMERA

toggle

atm toggle [-h] [-r -s -i <user-id> -p <permission-name> -k <status>] [-r -o -i <user-id> -p <permission-name>]

Parameters of the toggle command

Parameter	Description
-h	Displays help information.
-r -s -i <user-id> -p <permission-name> -k <status>	Sets the toggle status (specified by status) of a specified permission of a specified user. The -r, -s, -i, -p and -k parameters are mandatory. The return value indicates whether the operation is successful.
-r -o -i <user-id> -p <permission-name>	Obtains the toggle status of a specified permission for a specified user. The -r, -o, -i, and -p parameters are mandatory.

Example:

# Display the help information about the atm toggle command.
atm toggle -h

# Enable the camera permission for user 0.
atm toggle -r -s -i 0 -p ohos.permission.CAMERA -k 1

# Obtain the toggle state of the camera permission for user 0.
atm toggle -r -o -i 0 -p ohos.permission.CAMERA

toggle

atm toggle [-h] [-u -s -i <user-id> -k <status>] [-u -o -i <user-id>]

Parameters of the toggle command

Parameter	Description
-h	Displays help information.
-u -s -i <user-id> -k <status>	Sets the toggle status (specified by status) of the permission usage records. The -u, -s, -i and -k parameters are mandatory. The return value indicates whether the operation is successful.
-u -o -i <user-id>	Obtains the toggle status of the permission usage records for a specified user. The -, -o, and -i parameters are mandatory.

Example:

# Display the help information about the atm toggle command.
atm toggle -h

# Enable the toggle status of the permission usage records for user 0.
atm toggle -u -s -i 0 -k 1

# Obtain the toggle status of the permission usage records of user 0.
atm toggle -u -o -i 0

dump

atm dump [-h] [-t [-i <token-id>] [-b <bundle-name>] [-n <process-name>]] [-r [-i <token-id>] [-p <permission-name>]] [-v [-i <token-id>] [-p <permission-name>]]

In the following commands, the -t, -r and -v parameters are mandatory, and the -i, -b, -n and -p parameters are optional. For atm dump -r and atm dump -v, the -i and -p parameters can be used together. For atm dump -t, the -i, -b, and -n parameters can only be used independently.

Parameter	Description
-h	Displays help information.
-t	Dumps information about all application processes in the system. This parameter is mandatory.
-t -i <token-id>	Dumps the permission information of an application based on the token ID of the application process. This parameter is optional.
-t -b <bundle-name>	Dumps the permission information of an application based on the bundle name of the application process. This parameter is optional.
-t -n <process-name>	Dumps the permission information of an application based on the process name of the application process. This parameter is optional.
-r	Dumps all permission usage records in the system. This parameter is mandatory.
-r -i <token-id>	Dumps the permission usage records of an application based on the token ID of the application process. This parameter is optional.
-r -p <permission-name>	Dumps the usage records of a permission with the specified permission name. This parameter is optional.
-v	Dumps the permission usage types of all application processes in the system. This parameter is mandatory.
-v -i <token-id>	Dumps the permission usage types of an application based on the token ID of the application process. This parameter is optional.
-v -p <permission-name>	Dumps the usage types of a permission with the specified permission name. This parameter is optional.

Example:

#Display the help information about the atm dump command.
atm dump -h

#Dump the token IDs and bundle names of all application processes in the system.
atm dump -t

#Dump the permission information based on the token ID.
atm dump -t -i *********

#Dump the permission information based on the bundle name.
atm dump -t -b ohos.telephony.resources

#Dump the permission information based on the process name.
atm dump -t -n *********

#Dump the permission types of all applications.
atm dump -v

#Dump the permission usage types based on the token ID.
atm dump -v -i *********

#Dump the permission usage types based on the permission name.
atm dump -v -p ohos.permission.CAMERA

#Dump the permission usage types based on the token ID and permission name.
atm dump -v -i ********* -p ohos.permission.CAMERA

#Dump all permission usage records in the system.
atm dump -r

#Dump the permission usage records based on the token ID.
atm dump -r -i *********

#Dump the permission usage records based on the permission name.
atm dump -r -p ohos.permission.CAMERA

#Dump the permission usage records based on the token ID and permission name.
atm dump -r -i ********* -p ohos.permission.CAMERA