Planning your return to office strategy? See how Chrome OS can help.

Extension workflows: Let users request extensions

For Chrome version 92 or later.

Applies to computers that are managed using Chrome Browser Cloud Management (CBCM) and managed Chrome OS devices. This feature is not currently available for Enterprise accounts on unmanaged browsers or unmanaged Chrome OS devices.

As an admin, you can use the Google Admin console to let users request the extensions that they need in the Chrome Web Store. Then, you can allow, block, or automatically install extensions that users request.

Things to consider

  • We recommend that first you apply settings to a small number of users and devices in a test organizational unit. Then, after you verify that devices are working correctly, you can apply them to your entire organization.
  • Allowing users to request extensions on their personal devices needs more discussion. For now, only include users with company owned devices in your test organizational unit.
  • When you complete these steps to turn the feature on, users can only install the extensions that you allow in the Apps & extensions list and requested extensions that you approve. All other apps are disabled or blocked. In steps 2 and 3 below, make sure that you approve or automatically install all of the apps that your users need.
  • To manage extension requests for a specific group of users or enrolled Chrome browsers, put the user accounts or browsers in an organizational unit. You can’t set the installation policy for individual users or browsers. 

How to

Step 1: Turn on reporting

For details, about how to receive daily profile and system state data in your Admin console, see Enable Chrome browser reporting.

Before you proceed to the next step, verify that reports are populated with data. It can take up to 48 hours for data to show up in reports.

Step 2: Get a list of currently installed extensions

There are two ways to get a list of all the extensions that are currently installed on users’ enrolled Chrome browsers and Chrome OS devices:

Step 3: Specify the apps you want to allow

  1. Sign in to your Google Admin console.

    Sign in using your administrator account (does not end in @gmail.com).

  2. From the Admin console Home page, go to Devicesand thenChrome.
  3. Click Apps & extensionsand thenUsers & browsers.
  4. To apply the setting to everyone, leave the top organizational unit selected. Otherwise, select a child organizational unit.
  5. Add the apps that appear in the list that you already obtained in Step 2:
    1. Click Add ""and thenAdd from Chrome Web Store.
    2. Find the app and click Select.
    3. If prompted, accept the app permissions on behalf of your organization.

For details about setting policies for a specific Chrome extension, go to View and configure apps and extensions.

Step 4: Allow users to request extensions

  1. Sign in to your Google Admin console.

    Sign in using your administrator account (does not end in @gmail.com).

  2. From the Admin console Home page, go to Devicesand thenChrome.
  3. Click Apps & extensionsand thenUsers & browsers.
  4. To apply the setting to everyone, leave the top organizational unit selected. Otherwise, select a child organizational unit.
  5. On the right, click Additional settings"".
  6. Scroll down to Allow/block mode.
  7. Under Chrome Web Store, select Block all apps, admin manages allowlist, users may request extensions.
  8. Click Save.

Step 5: Manage extension requests

View and manage extensions that users have requested on the extension request page.

  1. Sign in to your Google Admin console.

    Sign in using your administrator account (does not end in @gmail.com).

  2. From the Admin console Home page, go to Devicesand thenChrome.
  3. Click Apps & extensionsand thenRequests.
  4. Click on the row of the extension that you want to set the installation policy for.
  5. Set the installation policy. Choose an option:
    • Force install—Lets admins automatically install the extension.
    • Allow install—Lets users install the extension.
    • Block—Prevents users from installing the extension. Removes the extension from users that have it installed. Add a customized message to explain to users why you’re blocking the extension.
  6. Select the organizational unit you want to force install, allow install, or block the extension for.
  7. Click Save.

What users can do

Request an extension

  1. Open the Chrome Web Store.
  2. In the left column, click Extensions.
  3. Browse or search for the extension you want to add.
  4. Click Request. Sometimes you might see one of the following buttons instead:
    • Pending—You have already requested the extension and are waiting for approval.
    • Blocked by admin—Admin has rejected the request.
    • Installed—Admin has already force-installed the extension.
  5. Do one of the following:
    • If you’re requesting the extension for the first time, confirm that you want to send a request to your admin. Review the types of data that the extension will be able to access and click Send.
    • If you already requested the extension, you’ll see a message that lets you know you already requested it. Click OK.
    • If the admin blocked the extension, you’ll see a message that lets you know it’s blocked. Click OK.
  6. To check the status of extensions that you requested, in your browser window, go to chrome://extensions.

You'll see your installed extensions in Chrome as buttons on the toolbar. When your admin approves, automatically installs, or blocks the extension you requested, you’ll get a Chrome notification letting you know.

Verify policies are applied

Check users’ devices to make sure the policy was applied correctly.

  1. On a users’ device, go to chrome://policy.
  2. Click Reload policies.
  3. Check the Show policies with no value set box.
  4. For the CloudExtensionRequestEnabled policy, make sure that Status is set to OK and Policy value is True.
  5. For the CloudReportingEnabled policy, make sure that Status is set to OK and Policy value is True.

Verify requests are sent

Check users’ devices to make sure the request was sent.

  1. On a users’ device, go to chrome://prefs-internals.
  2. Search for enterprise_reporting. You'll see a list of extension IDs and timestamps.

Known Issues

Newly enrolled browsers and Chrome OS devices can take up to 24 hours to send their requests to the Admin console.

Related topics

Was this helpful?
How can we improve it?
Search
Clear search
Close search
Google apps
Main menu
Search Help Center
true
410864
false