I like graphene for this. Very easy to set permissions on apps. I don’t know how the default android experience is since I haven’t tried it in a long time