diff --git a/common/common-vendor.mk b/common/common-vendor.mk
index 17109d7..65fb6c4 100644
--- a/common/common-vendor.mk
+++ b/common/common-vendor.mk
@@ -6,6 +6,7 @@ PRODUCT_SOONG_NAMESPACES += \
     vendor/gapps/common
 
 PRODUCT_COPY_FILES += \
+    vendor/gapps/common/proprietary/product/etc/default-permissions/default-permissions-google.xml:$(TARGET_COPY_OUT_PRODUCT)/etc/default-permissions/default-permissions-google.xml \
     vendor/gapps/common/proprietary/product/etc/permissions/com.google.android.dialer.support.xml:$(TARGET_COPY_OUT_PRODUCT)/etc/permissions/com.google.android.dialer.support.xml \
     vendor/gapps/common/proprietary/product/etc/permissions/privapp-permissions-google-product.xml:$(TARGET_COPY_OUT_PRODUCT)/etc/permissions/privapp-permissions-google-product.xml \
     vendor/gapps/common/proprietary/product/etc/security/fsverity/gms_fsverity_cert.der:$(TARGET_COPY_OUT_PRODUCT)/etc/security/fsverity/gms_fsverity_cert.der \
diff --git a/common/proprietary/product/etc/default-permissions/default-permissions-google.xml b/common/proprietary/product/etc/default-permissions/default-permissions-google.xml
new file mode 100644
index 0000000..868d896
--- /dev/null
+++ b/common/proprietary/product/etc/default-permissions/default-permissions-google.xml
@@ -0,0 +1,31 @@
+<?xml version='1.0' encoding='utf-8' standalone='yes' ?>
+<exceptions>
+  <exception
+    package="com.google.android.apps.restore"
+    sha256-cert-digest="56:BE:13:2B:78:06:56:FE:24:44:CD:34:32:6E:B5:D7:AA:C9:1D:20:96:AB:F0:FE:67:3A:99:27:06:22:EC:87">
+    <!-- External storage -->
+    <permission name="android.permission.READ_EXTERNAL_STORAGE" fixed="false"/>
+    <permission name="android.permission.WRITE_EXTERNAL_STORAGE" fixed="false"/>
+    <!-- Contacts -->
+    <permission name="android.permission.READ_CONTACTS" fixed="false"/>
+    <permission name="android.permission.WRITE_CONTACTS" fixed="false"/>
+    <!-- For D2D Restore -->
+    <permission name="android.permission.READ_CALL_LOG" fixed="false"/>
+    <permission name="android.permission.WRITE_CALL_LOG" fixed="false"/>
+    <permission name="android.permission.ACCESS_FINE_LOCATION" fixed="false"/>
+  </exception>
+
+  <exception
+    package="com.google.android.apps.assistant"
+    sha256-cert-digest="43:0B:20:EB:61:96:7E:9C:5B:BE:02:59:9B:07:35:16:80:7D:AE:72:D7:86:FE:92:7F:48:96:B7:C7:F2:96:1F">
+    <!-- Record audio -->
+    <permission name="android.permission.RECORD_AUDIO" fixed="false"/>
+  </exception>
+
+  <exception
+    package="com.google.android.apps.actionsservice"
+    sha256-cert-digest="43:0B:20:EB:61:96:7E:9C:5B:BE:02:59:9B:07:35:16:80:7D:AE:72:D7:86:FE:92:7F:48:96:B7:C7:F2:96:1F">
+    <!-- Record audio -->
+    <permission name="android.permission.RECORD_AUDIO" fixed="false"/>
+  </exception>
+</exceptions>
diff --git a/proprietary-files-common.txt b/proprietary-files-common.txt
index eddec0f..c1aef3a 100644
--- a/proprietary-files-common.txt
+++ b/proprietary-files-common.txt
@@ -7,6 +7,8 @@
 
 -product/framework/com.google.android.dialer.support.jar;PRESIGNED
 
+product/etc/default-permissions/default-permissions-google.xml
+
 product/etc/permissions/com.google.android.dialer.support.xml
 product/etc/permissions/privapp-permissions-google-product.xml