WRITE_SETTINGS - to be able to set ringtone and for temporary display timeout change while in lockscreen and direct unlock is enabled.
WRITE_EXTERNAL_STORAGE - to be able to write album art cache to sd card
WAKE_LOCK - to be able not to sleep when song is played
READ_PHONE_STATE - to be able to pause (and then resume playing) when phone is ringing/call is in progress
INTERNET - to be able to download album art and show help
ACCESS_NETWORK_STATE - to detect Wi-Fi mode and download (or not) album art, according to the options set by user
DISABLE_KEYGUARD - to be able to implement Lock Screen
MODIFY_AUDIO_SETTINGS - to be aware which audio output is active for Equalizer per-output preset assignments (yes, there is one permission for both read and modify audio settings, Poweramp just reads them)
BROADCAST_STICKY - to broadcast sticky events for Poweramp API
BLUETOOTH - to check BT status
org.onepf.openiab.permission.BILLING - for in-app app unlocking
GET_ACCOUNTS - for in-app app unlocking
We're trying to keep this permission set as minimal as absolutely possible.