Search
Clear search
Close search
Google apps
Main menu
true

Are your Chrome devices having WiFi connection problems? Fix now

Manage individual apps on Chrome

As an administrator, you can manage specific Chrome apps and extensions as well as Android apps for your organization. For example, you can specify apps that users can install. Or, deploy an app as a Chrome kiosk app. You might also want to prevent apps or extensions from altering webpages. If so, you can block certain URLs.

You can also manage Chrome apps and extensions by organizational unit.

Configure app and extension policies

  1. Sign in to your Google Admin console.

    Sign in using your administrator account (does not end in @gmail.com).

  2. From the Admin console dashboard, go to Device managementand thenChrome management.

    If you don't see Device management on the dashboard, click More controls at the bottom.

  3. Click App Management.
  4. On the left, use the App Type filter to display Chrome Apps or Android Apps.
  5. On the left, use the Type filter to display:
    • Approved or configured Android apps
    • Domain, business, or configured Chrome apps
    • Business extensions.
  6. Search for and click the app you want to manage.
  7. Click the category of settings you want to configure:
    • User settings—Configure the app for users who sign in with an account in your domain.
    • Public session settings—Configure the app for users that sign in to a public session on your devices.
    • Kiosk settings—Deploy the app as a kiosk app if the app is kiosk-enabled in the app’s manifest file.
  8. Select the organization where you want to configure the policies.
    For everyone in your organization, select the top-level organization. Otherwise, select a child organization.
  9. Set any needed app and extension policies. See Chrome app and extension policies.
  10. Click Save.

Understand inherited settings

Initially, an organization inherits the settings of its parent. Therefore, you only need to change the settings you want to customize. Settings inherited from the parent are labeled Setting inherited. Settings you change are labeled Setting overridden.

  • To override an inherited value, click Override. The text under the setting changes to Setting overridden and you can change the setting.
  • To return an overridden setting to its inherited value, click Inherit. The text under the setting changes to Setting inherited. You can’t change the setting while it’s inherited.

Example scenarios for preventing webpage modification

Use Google Translate for specific websites

You want to let users see translations of specific websites using Google Translate.

How to

  1. Follow the steps to configure app and extension policies for the Google Translate Chrome app.
  2. For Blocked URLs, enter *://*. (See Block extensions by permission.)
  3. For Allowed URLs, enter the webpage URLs of specific websites you want users to be able to see in different languages. (See Block extensions by permission.)
Allow certain apps to modify a webpage

Your organization has multiple subdomains with different top-level domains, such as example.com, example.info, example.co.uk, and so on. You want to prevent Chrome apps and extensions from modifying your organization’s webpages. However, you want to allow your organization’s own private app to alter your organization’s webpages.

How to

  1. Configure general settings for all apps and extensions:
    1. Follow the steps to prevent apps and extensions from altering webpages for everyone in the organization.
    2. For Blocked URLs, enter *://.example.*.
  2. Configure settings for a specific app or extension:
    1. For your organization’s private app, follow the steps to configure app and extension policies.
    2. For Allowed URLs, enter *://*.*. (See Block extensions by permission.)
Customize what users can install and access

You want to validate any apps and extensions that your users install. You also want to specify certain webpages that apps or extensions can access.

  • Extension1 can only access transport layer security (TLS) secured pages on private.example.com.
  • Extension2 can access unencrypted pages on public.example.com.

How to

  1. Configure general settings for all apps and extensions:
    1. Follow the steps to prevent apps and extensions from altering webpages for everyone in the organization.
    2. For Blocked URLs, enter *://*.*.
  2. Configure settings for Extension1:
    1. Follow the steps to configure app and extension policies.
    2. For Blocked URLs, enter *://*.*. (See Block extensions by permission.)
    3. For Allowed URLs, enter https://private.example.com. (See Block extensions by permission.)
  3. Configure settings for Extension2:
    1. Follow the steps to configure app and extension policies.
    2. For Blocked URLs, enter *://*.*. (See Block extensions by permission.)
    3. For Allowed URLs, enter http://public.example.com. (See Block extensions by permission.)

Chrome app and extension policies

When you're configuring app and extension policies, you can customize them to suit your organization.

Add to Chrome Web Store collection

Applies to User settings.

Recommends the app to your users in the Chrome Web Store.

Allow access to client certificates and keys

Applies to User settings, Public session settings, and Kiosk settings.

Allows the app to read and use client certificates.

Exception: Even if you have enabled Android Apps on supported Chrome devices in your organization, this policy cannot be used to grant Android apps access to client certificates and keys.

Allow app to manage power

Applies to Kiosk settings.

Lets the app call the power APIs to modify the default Chrome device behavior.

Allow installation

Applies to User settings and Public session settings.

Lets users install the app.

Block extensions by permission

Applies to User settings and Public session settings.

Prevents users from installing or running Chrome apps or extensions that request certain permissions that your organization doesn’t allow. You can also prevent apps or extensions from modifying websites you specify.

To block or allow permissions:

  1. Click Manage and choose the permissions you want to block or allow.
  2. For Blocked URLs and Allowed URLs, specify the webpage URLs that you want to allow or prevent an app or extension from interacting with.
    • Blocked URLs—Prevents an app or extension from interacting with specified hosts.
    • Allowed URLs—Allows an app or extension to interact with specified hosts, even if they’re also defined in Blocked URLs.

The format of host patterns is http|https|ftp|*]://[subdomain|*].[hostname|*].[eTLD|*], where

  • [http|https|ftp|*], [hostname|*], and [eTLD|*] are required.
  • [subdomain|*] is optional.
Valid host patterns Matches Doesn't match
 *://*.example.* http://example.com
https://test.example.co.uk
https://example.google.com
http://example.google.co.uk
http://example.* http://example.com http://example.ly https://example.com
http://test.example.com
http://example.com http://example.com https://example.com
http://test.example.co.uk
http://*.example.com http://example.com
http://test.example.com
http://t.t.example.com
https://example.com
https://test.example.com
http://example.co.* http://example.co.com
http://example.co.co.uk
http://example.co.uk
http://*.test.example.com http://t.test.example.com
http://test.example.com
http://not.example.com
*://*.* All Urls  
Invalid host patterns    

http://t.*.example.com

http*://example.com

http://*example.com

http://example.com/

http://example.com/*

   
Configure

Applies to User settings, Public session settings, and Kiosk settings.

Uploads a configuration file to install customized policies and settings supported by the app. The Configure setting is only available if the app supports a configuration file.

Related topics

Device settings page

Applies to Kiosk settings.

Configures a kiosk app to launch automatically on the Device settings page. You can deploy multiple kiosk apps to a device but you can only choose one to launch automatically when the device starts.

To configure an app as a single-app kiosk:

  1. Click Device settings page.
  2. Go to Kiosk Settings.
  3. For Auto-Launch Kiosk App, choose the kiosk app you want to launch automatically.
Disable virtual keyboard

Applies to Kiosk settings.

Disables the virtual keyboard for an app. When disabled, the virtual keyboard never pops up, even on devices with touch screens or with touch enabled.

Enable unified desktop (beta)

Applies to Kiosk settings.

Lets users span an app across multiple monitors or TVs that have the same resolution. Up to 2 external displays are supported. When enabled, unified desktop is the default mode when a user connects a monitor to their device. When disabled, users can still use 2 external displays, but individual windows will be in one display or the other, even if the desktop is extended across both.

Force installation

Applies to User settings and Public session settings.

Installs the app automatically and prevents users from removing it.

Install automatically

Applies to Kiosk settings.

Installs the app automatically on kiosk devices.

Maintenance window

Applies to Kiosk settings.

Specifies the start and end time (local time) of a maintenance window for the kiosk app. At the start time, the kiosk app is automatically stopped and maintenance activities, such as pending app updates, are performed on the app. At the end time, the app is automatically started again.

Pin to taskbar

Applies to User settings and Public session settings.

(Chrome OS only) Pins the app to the taskbar.

Plugins

Applies to Kiosk settings.

Sets whether websites are allowed to run plug-ins. Plug-ins are used by websites to enable certain types of web content (such as Adobe® Flash®) that Chrome can't inherently process. By default, plug-ins run automatically on kiosks.

Related topics

Treat top-row keys as function keys

Applies to Kiosk settings.

Determines the default behavior of the top row of keys on the keyboard. When you turn on this setting, the keys act as function keys, such as F1 and F2. When you turn it off, they act as media keys, such as Play and Pause. Users can turn a function key into a media key (and vice versa) by holding down the Search key on the Chromebook keyboard.

Was this article helpful?
How can we improve it?