Allow or block apps and extensions

For administrators who manage Chrome policies from the Google Admin console.

Manage extensions in your enterprise with Chrome Enterprise Core.   Schedule a demo

As a Chrome Enterprise admin, you can control which apps or extensions users can install on managed Chrome browsers or ChromeOS devices.

This article gives a high-level overview of how to set policies for all users or customize settings for different groups. For more detailed information, see the guide Managing Extensions in Your Enterprise.

Before you begin

  • To make settings for a specific group of users or enrolled Chrome browsers, put the user accounts or browsers in a group or organizational unit. Only user accounts can be added to groups. For details, see Groups and Add an organizational unit.
  • To apply settings for Chrome browser users on Windows, Mac, or Linux computers, turn on Chrome browser management for the organizational unit that they belong to. See Turn on Chrome browser management.
  • Make sure that the Chrome Web Store service is turned on. Otherwise, your users can’t access the Chrome Web Store to browse or install apps and extensions, including ones that you allow.
    By default, the Chrome Web Store service is turned off in some Education domains. For details about turning on Chrome Web Store service for users, see Additional Google services.
    Note: Even if Chrome Web Store service is turned off, force-installed apps and extensions continue to automatically install and users can still sideload extensions.
  • There is a limit of 500 for the total number of apps times the number of groups.

Set policies in the Admin console

Can apply for signed-in users on any device or enrolled browsers on Windows, Mac, or Linux. For details, see Understand when settings apply.

How to manage security settings for apps and extensions

For a step by step guide, watch this how-to demo video

Related topics

Google and related marks and logos are trademarks of Google LLC. All other company and product names are trademarks of the companies with which they are associated.

Was this helpful?

How can we improve it?
7184474581292868298
true
Search Help Center
true
true
true
true
true
410864
Search
Clear search
Close search
Main menu
false
false