I like graphene for this. Very easy to set permissions on apps. I don’t know how the default android experience is since I haven’t tried it in a long time 

 I haven't worked up the nerve to go all-in on graphene but it's on my radar.