Play Store has an irrevocable INSTALL_PACKAGE
INSTALL_PACKAGE
permission that allows it as a system app to install apps without other assistance.
Based on quick testing by disabling every possible permission on Play Store and Play Services from the app info, it is still possible to purchase, download, and install apps from Play Store.
Referring to the Open GApps Pico package for the absolute minimum GApps installation:
- Google System Base (invisible?)
- (Google) Android Shared Library: no permissions requested, cannot be disabled
- Google Play Store: only requires Files and media
- Google Calendar Sync: unrelated to Play Store
- Dialer Framework: unrelated to Play Store
- (Google) Package Installer: no permissions requested, cannot be disabled
- Google Play Services: only requires Physical activity, though unrelated to Play Store, cannot be disabled
- Google Text-to-Speech: unrelated to Play Store
- Android Auto stub: unrelated to Play Store
Note that this only guarantees app purchase and installation. Apps that rely on Google Play Services might not work correctly without additional permissions allowed.
Additional reading: