Android Marshmallow introduced the runtime permissions model, and Android for Work had to deal with managing policies for devices. You as device owner can now set a policy for all runtime requests of all applications using setPermissionPolicy().
You can choose to prompt users to grant permissions or automatically grant or deny the permissions silently. The automatic policy means that the user cannot modify the app's permissions screen in Settings.