In Symantec Endpoint Protection Mobile (SEP Mobile) app version 3.8 for Android new SMS and phone permissions were introduced. The onboarding wizard is asking the End User to grant the SMS Permissions.
If SEP Mobile is being installed inside the Android for Work container, and the application's permissions are managed by Android for Work, end users will not be able to grant the SMS permissions. In the following screen, they hit 'continue':
But the SMS Permission is 'grayed out' and marked as enabled / disabled by admin:
The SEP Mobile as a manage app on Android devices article includes additional information, and reference to the managed permissions setting in Android for Work.
SEP Mobile should allow requesting the SMS permissions.