whether Permission can only be set at AndroidManifest.xml.

No, permissions can also be requested and set dynamically at runtime using the ActivityCompat.requestPermissions() method in code. However, certain permissions, such as dangerous permissions, still require explicit user approval even if requested at runtime. Additionally, some permissions can only be set in the AndroidManifest.xml file, such as signature permissions and permissions required for certain features like camera or location services.