In Symantec Endpoint Protection Mobile (SEP Mobile) app version 3.8 for Android new SMS and phone permissions were introduced. The onboarding wizard is asking the End User to grant the SMS Permissions.
If SEP Mobile is being installed inside the Android for Work container, and the application's permissions are managed by Android for Work, end users will not be able to grant the SMS permissions. In the following screen, they hit 'continue':
But the SMS Permission is 'grayed out' and marked as enabled / disabled by admin: