vendor_gapps/common/proprietary/product/etc/default-permissions/default-permissions-google.xml

<?xml version='1.0' encoding='utf-8' standalone='yes' ?>
<exceptions>
  <exception
    package="com.google.android.apps.restore"
    sha256-cert-digest="56:BE:13:2B:78:06:56:FE:24:44:CD:34:32:6E:B5:D7:AA:C9:1D:20:96:AB:F0:FE:67:3A:99:27:06:22:EC:87">
    <!-- External storage -->
    <permission name="android.permission.READ_EXTERNAL_STORAGE" fixed="false"/>
    <permission name="android.permission.WRITE_EXTERNAL_STORAGE" fixed="false"/>
    <!-- Contacts -->
    <permission name="android.permission.READ_CONTACTS" fixed="false"/>
    <permission name="android.permission.WRITE_CONTACTS" fixed="false"/>
    <!-- For D2D Restore -->
    <permission name="android.permission.READ_CALL_LOG" fixed="false"/>
    <permission name="android.permission.WRITE_CALL_LOG" fixed="false"/>
    <permission name="android.permission.NEARBY_WIFI_DEVICES" fixed="false"/>
    <permission name="android.permission.POST_NOTIFICATIONS" fixed="false"/>
  </exception>

  <exception
    package="com.google.android.apps.assistant"
    sha256-cert-digest="43:0B:20:EB:61:96:7E:9C:5B:BE:02:59:9B:07:35:16:80:7D:AE:72:D7:86:FE:92:7F:48:96:B7:C7:F2:96:1F">
    <!-- Record audio -->
    <permission name="android.permission.RECORD_AUDIO" fixed="false"/>
  </exception>

  <exception
    package="com.google.android.apps.actionsservice"
    sha256-cert-digest="43:0B:20:EB:61:96:7E:9C:5B:BE:02:59:9B:07:35:16:80:7D:AE:72:D7:86:FE:92:7F:48:96:B7:C7:F2:96:1F">
    <!-- Record audio -->
    <permission name="android.permission.RECORD_AUDIO" fixed="false"/>
  </exception>

  <exception
    package="com.google.android.marvin.talkback"
    sha256-cert-digest="7B:5A:D5:51:80:A4:8A:1F:30:F3:53:77:C0:F9:E5:F9:11:BF:94:2F:B4:CF:83:EB:A2:55:A0:EB:F5:80:BE:EF">
    <!-- Read phone status -->
    <permission name="android.permission.READ_PHONE_STATE" fixed="false"/>
    <!-- Bluetooth permissions -->
    <permission name="android.permission.BLUETOOTH_CONNECT" fixed="false"/>
    <permission name="android.permission.BLUETOOTH_SCAN" fixed="false"/>
    <permission name="android.permission.BLUETOOTH_ADVERTISE" fixed="false"/>
  </exception>

  <exception
    package="com.google.android.deskclock"
    sha256-cert-digest="F0:FD:6C:5B:41:0F:25:CB:25:C3:B5:33:46:C8:97:2F:AE:30:F8:EE:74:11:DF:91:04:80:AD:6B:2D:60:DB:83">
    <!-- Notifications -->
    <permission name="android.permission.POST_NOTIFICATIONS" fixed="false"/>
  </exception>

  <exception
    package="com.google.android.apps.tachyon"
    sha256-cert-digest="7C:AA:B6:E6:BA:70:0E:0D:DC:F7:5C:CA:52:B8:C3:B1:9A:3C:7D:23:30:8F:7E:B1:77:A6:4E:B2:47:61:97:BD">
    <!-- Notifications -->
    <permission name="android.permission.READ_CONTACTS" fixed="false"/>
    <permission name="android.permission.READ_PHONE_STATE" fixed="false"/>
    <permission name="android.permission.RECORD_AUDIO" fixed="false"/>
    <permission name="android.permission.WRITE_CALL_LOG" fixed="false"/>
    <permission name="android.permission.WRITE_CONTACTS" fixed="false"/>
    <permission name="android.permission.POST_NOTIFICATIONS" fixed="false"/>
  </exception>

 <exception
    package="com.google.android.apps.photos"
    sha256-cert-digest="3D:7A:12:23:01:9A:A3:9D:9E:A0:E3:43:6A:B7:C0:89:6B:FB:4F:B6:79:F4:DE:5F:E7:C2:3F:32:6C:8F:99:4A">
    <permission name="android.permission.ACCESS_MEDIA_LOCATION" fixed="false"/>
    <permission name="android.permission.READ_MEDIA_IMAGES" fixed="false"/>
    <permission name="android.permission.READ_MEDIA_VIDEO" fixed="false"/>
  </exception>
</exceptions>