Automatically install apps and extensions

For administrators who manage Chrome policies from the Google Admin console.
Force install apps and extensions

You can automatically install (force-install) specific Chrome apps and extensions for users in your organization. Users then see these apps and extensions when using Chrome on managed devices or accounts.

Most Chrome apps and extensions are in the Chrome Web store. You can also force-install third-party apps and extensions. Users can’t remove items that are force-installed. The items also bypass any blocked apps and extensions.

Before you begin

  • To make settings for a specific group of users or enrolled Chrome Browsers, put the user accounts or browsers in an organizational unit.
  • To apply settings for Chrome Browser users on Windows, Mac, or Linux computers, turn on Chrome Browser management for the organizational unit that they belong to. See Turn on Chrome Browser management.

Force install apps

Can apply for signed-in users on any device or enrolled browsers on Windows, Mac, or Linux. For details, see Understand when settings apply.

These steps assume you're familiar with making Chrome settings in your Admin console.

  1. Sign in to your Google Admin console.

    Sign in using your administrator account (does not end in

  2. From the Admin console Home page, go to Devicesand thenChrome.
  3. Click Apps & extensionsand thenUsers & browsers or Managed guest sessions.
  4. To apply the setting to all users and enrolled browsers, leave the top organizational unit selected. Otherwise, select a child organizational unit.
  5. Go to the app that you want to automatically install.
  6. Under Installation policy, choose Force install or Force install + pin.
  7. Click Save. If you configured a child organizational unit, you might be able to Inherit or Override a parent organizational unit's settings.

How it works

Force-installing an app or extension gives it permission to access information on the device it's installed on. For example, an app might access a user's bookmarks or use their location. It can also access a device’s Directory API ID through an extension API. And, it can use the Chrome enterprise.platformKey API without requesting permission.

Related topics

Was this helpful?
How can we improve it?