"Work profile users will be able to approve (if allowed by their IT admin) or deny sensor-related permissions, such as location and camera, to work profile apps. On fully-managed devices, IT admins can choose to give their users this same control," Google said in a statement late Thursday.