As an administrator, you can allow users in your organization to install and run any Google Workspace Marketplace app, only allowlisted apps, or no apps. If you don’t allow users to install apps themselves or only allowlisted apps, you can sill install any apps for them.
Tip: For some Google Workspace services, you can allow or block third-party apps and add-ons for just that service. For details, see Allow third-party apps for Drive files, Allow or restrict add-ons in Docs editors, Allow users to install Chat apps, and Allow add-ons for Calendar.
Before you begin
- To apply the setting for certain users, put their accounts in an organizational unit (to set by department) or a configuration group (to set for users across or within departments).
- If you change the setting to one that’s more restrictive, your users might lose access to apps that they previously installed.
- API controls override the allowlist and can limit which Google services apps can access. Learn more about setting API controls and how they interact with Marketplace settings.
Set user access to Marketplace apps
-
Sign in to your Google Admin console.
Sign in using your administrator account (does not end in @gmail.com).
-
In the Admin console, go to Menu
Apps
Google Workspace Marketplace apps
-
Click User Install Settings.
- To apply the setting to everyone, leave the top organizational unit selected. Otherwise, select a child organizational unit or a configuration group.
- In the Manage access to apps section, select whether users can install any apps, only allowlisted apps, or no apps.
- (Optional) If you choose to allow only allowlisted apps, you can also choose if users can install all internal apps, even if they’re not on your allowlist.
-
Click Save. If you configured an organizational unit or group, you might be able to either Inherit or Override a parent organizational unit, or Unset a group.
Changes can take up to 24 hours but typically happen more quickly. Learn more
