Automatically install apps and extensions
You can automatically install (force-install) specific Chrome apps and extensions for users in your organization. Users then see these apps and extensions when using Chrome on managed devices or accounts.
Most Chrome apps and extensions are in the Chrome Web store. You can also force-install third-party apps and extensions. Users can’t remove items that are force-installed. The items also bypass any blocked apps and extensions.
Before you begin
- To make settings for a specific group of users or enrolled Chrome Browsers, put the user accounts or browsers in an organizational unit.
- To apply settings for Chrome Browser users on Windows, Mac, or Linux computers, turn on Chrome Browser management for the organizational unit that they belong to. See Turn on Chrome Browser management.
Force install apps
Can apply for signed-in users on any device or enrolled browsers on Windows, Mac, or Linux. For details, see Understand when settings apply.
These steps assume you're familiar with making Chrome settings in your Admin console.
From the Admin console Home page, go to DevicesChrome management.
If you don't see Devices on the Home page, click More controls at the bottom.
- Click Apps & extensions.
- To apply the setting to all users and enrolled browsers, leave the top organizational unit selected. Otherwise, select a child organizational unit.
- At the top, click Users & Browsers or Managed Guest Sessions.
- Go to the app that you want to automatically install.
- Under Installation policy, choose Force install or Force install + pin.
- Click Save. If you configured a child organizational unit, you might be able to Inherit or Override a parent organizational unit's settings.
How it works
Force-installing an app or extension gives it permission to access information on the device it's installed on. For example, an app might access a user's bookmarks or use their location. It can also access a device’s Directory API ID through an extension API. And, it can use the Chrome enterprise.platformKey API without requesting permission.