Automatically install apps and extensions

For administrators who manage Chrome policies from the Google Admin console.
Force install apps and extensions

You can automatically install (force-install) specific Chrome apps and extensions for users in your organization. Users then see these apps and extensions when using Chrome on managed devices or accounts.

Most Chrome apps and extensions are in the Chrome Web Store. You can also force-install third-party apps and extensions. Users can’t remove items that are force-installed. The items also bypass any blocked apps and extensions.

Before you begin

  • To make settings for a specific group of users or enrolled Chrome Browsers, put the user accounts or browsers in an organizational unit.
  • To apply settings for Chrome Browser users on Windows, Mac, or Linux computers, turn on Chrome Management, for the organizational unit that they belong to.

Force install apps

Can apply for signed-in users on any device, or enrolled browsers on Windows, Mac, or Linux. Learn more

These steps assume you're familiar with making Chrome settings in your Admin console.

  1. Sign in to your Google Admin console.

    Sign in using your administrator account (does not end in

  2. From the Admin console Home page, go to Devicesand thenChrome management.

    If you don't see Devices on the Home page, click More controls at the bottom.

  3. Click Apps & extensions.
  4. On the left, select the organizational unit where you want to configure settings.
    For all users, select the top-level organization. Otherwise, select a child organization. Initially, an organizational unit inherits the settings of its parent.
  5. At the top, click Users & Browsers or Managed Guest Sessions.
  6. Go to the app that you want to automatically install.
  7. Under Installation policy, choose Force install or Force install + pin.
  8. Click Save.

How it works

Force-installing an app or extension gives it permission to access information on the device it's installed on. For example, an app might access a user's bookmarks or use their location. It can also access a device’s Directory API ID through an extension API. And it can use the Chrome enterprise.platformKey API without requesting permission.

Related topics

Was this helpful?
How can we improve it?