Enroll browsers with Kandji (macOS)

Applies to macOS users who use managed Chrome browser.

As a Chrome Enterprise administrator, you can use Kandji to deploy a Chrome Browser Cloud Management enrollment token and enroll your Chrome browsers. You can then use your Google Admin console to enforce policies for any users who open Chrome browser on an enrolled Apple macOS device.

Before you begin

• Make sure you have access to the Kandji app with either an Account Owner, Admin, or Standard role.

Enroll browsers

Step 1: Generate the enrollment token

1. Sign in to your Google Admin console.

   Sign in using your administrator account (does not end in @gmail.com).

2. Generate an enrollment token. See Generate enrollment token.
3. Copy the token to use in Step 2.

Step 2: Enroll browsers with the enrollment token

1. Download the Chrome mobileconfig file.
2. Open the mobileconfig file in a text editor.
3. Edit the file to replace XXXXXXXX-XXXX-XXXX-XXXX-XXXXXXXXXXXX with the token generated in Step 1.
4. Save the edited file.
5. Sign into the Kandji web app.
6. Go to Library.
7. On the top right, click + Add New to open a list of new library items.
8. Search for and click Custom Profile in the list of library items.
9. Click Add & Configure + to create a new profile.
10. Enter a profile name. For example, Chrome Browser Cloud Management.
11. Select the device blueprints where you want the app to deploy.
12. Select Mac as the device family.
13. (Optional) Click + Add to define any other rules.
14. Upload the edited mobileconfig file.
15. Click Save.

Google and related marks and logos are trademarks of Google LLC. All other company and product names are trademarks of the companies with which they are associated.