You can automatically install (force-install) specific Chrome apps and extensions for users in your organization. Users then see these apps and extensions when using Chrome on managed devices or accounts.
Most Chrome apps and extensions are in the Chrome Web store. You can also force-install third-party apps and extensions. Users can’t remove items that are force-installed. The items also bypass any blocked apps and extensions.
Before you begin
- To make settings for a specific group of users or enrolled Chrome Browsers, put the user accounts or browsers in an organizational unit.
- To apply settings for Chrome Browser users on Windows, Mac, or Linux computers, turn on Chrome Browser management for the organizational unit that they belong to. See Turn on Chrome Browser management.
Force install apps and extensions
Can apply for signed-in users on any device or enrolled browsers on Windows, Mac, or Linux. For details, see Understand when settings apply.
These steps assume you're familiar with making Chrome settings in your Admin console.
From the Admin console Home page, go to DevicesChrome.
- Click Apps & extensionsUsers & browsers or Managed guest sessions.
- To apply the setting to all users and enrolled browsers, leave the top organizational unit selected. Otherwise, select a child organizational unit.
- Go to the app or extension that you want to automatically install.
- Under Installation policy, choose Force install or Force install + pin.
- Click Save. If you configured a child organizational unit, you might be able to Inherit or Override a parent organizational unit's settings.
When you pin extensions to users’ browser toolbars, the Admin console builds a set of configuration text that is then set in a JSON string for the ExtensionSettings policy. In rare instances, extensions are not properly pinned on browser toolbars because the JSON string is invalid.
We recommend that first you apply settings to a small number of users or browsers in a test organizational unit. Then, after you verify that extension policies are being applied correctly, you can fully deploy them.
- On a managed device, go to chrome://policy.
- Click Reload policies.
- Check the Show policies with no value set box.
- For the ExtensionSetting policy, make sure that Status is set to OK.
- For the ExtensionSetting policy, click Show more. In the Value field, use your preferred tool to make sure that there are no errors in the JSON code.
- Force-installing an app or extension gives it permission to access information on the device it's installed on. For example, an app might access a user's bookmarks or use their location. It can also access a device’s Directory API ID through an extension API.
- Force-installed apps can use the Chrome enterprise.platformKey API without requesting permission.
- The app ID or URL that you used to force-install an app never changes. Because app publishers determine the app icons and display names, they can change them at any time. If a publisher changes the app icon or name, those changes are immediately updated for force-installed apps on users' devices.
- App and extension policies in the Admin console
- Force-install apps using on-premise tools on: Windows | Mac | Linux
- Chrome enterprise.platformKey API
Google and related marks and logos are trademarks of Google LLC. All other company and product names are trademarks of the companies with which they are associated.