Planning your return to office strategy? See how Chrome OS can help.

Deploy Android apps to managed users on Chrome OS devices

For managed users on Chromebooks and other Chrome OS devices.

As an administrator, you can decide which Android apps your users can install and use on their Chrome OS devices. To get started, turn on Android apps for users in your organization.

Before you begin

  • If you allowlist Android apps, users can’t switch to secondary accounts in managed Google Play.
  • If you don't have a subscription to Chrome Enterprise Upgrade, you can manage Android apps for users only. In the steps below, skip the step to click the Users & browsers tab at the top of the page.
  • To configure Chrome OS devices to run as kiosks or managed guest sessions, first you need to enroll devices. For details, see Enroll Chrome OS devices.

Open all   |   Close all

Enable Android apps

Step 1: Enable Android apps
  1. Sign in to your Google Admin console.

    Sign in using your administrator account (does not end in @gmail.com).

  2. From the Admin console Home page, go to Devicesand thenChrome.
  3. Click Apps & extensionsand thenUsers & browsers.
  4. To apply the setting to everyone, leave the top organizational unit selected. Otherwise, select a child organizational unit.
  5. On the right, click Additional settings Settings.
  6. For Android applications on Chrome Devices, select Allow.
  7. (Optional) For Android Reporting for users and devices, select Enable Android reporting.
    The report only shows information for managed users using managed Chrome OS devices that support managed Google Play.
  8. Click Save.
Step 2: (Optional) Use additional controls
  1. Sign in to your Google Admin console.

    Sign in using your administrator account (does not end in @gmail.com).

  2. From the Admin console Home page, go to Devicesand thenChrome.
  3. Click Settingsand thenUsers & browsers.
  4. To apply the setting to all users and enrolled browsers, leave the top organizational unit selected. Otherwise, select a child organizational unit.
  5. Scroll to Android applications.
  6. (Optional) To stop users from adding a second Google Account, for Account management check the Google account box.
  7. (Optional) To synchronize Google Chrome OS CA certificates available to Android apps, for Certificate synchronization select Enable usage of Chrome OS CA certificates in Android apps.
  8. Click Save.

Settings typically take effect in minutes. But they might take up to an hour to apply for everyone.

Install Android apps on Chrome OS devices

Step 1: Select apps
  1. Sign in to your Google Admin console.

    Sign in using your administrator account (does not end in @gmail.com).

  2. From the Admin console Home page, go to Devicesand thenChrome.
  3. Click Apps & extensionsand thenUsers & browsers or Kiosks.
  4. To apply the setting to everyone, leave the top organizational unit selected. Otherwise, select a child organizational unit.
  5. Click Add Add questionand then Add from Google Play Add from Google Play.
  6. Search for and click the app you’d like to manage.
  7. Click Select.
  8. To accept the app permissions on behalf of your organization, click Accept.
Step 2: Decide how apps are installed

As an admin you have 2 ways to install apps for your users on Chrome OS devices. You can automatically install apps (Force install), or you can allow the user to manually install apps from managed Google Play (Allow install). You can also pin force-installed apps to the user’s taskbar and you can block users from installing apps.

Configure app installation settings

  1. Sign in to your Google Admin console.

    Sign in using your administrator account (does not end in @gmail.com).

  2. From the Admin console Home page, go to Devicesand thenChrome.
  3. Click Apps & extensionsand thenUsers & browsers.
  4. To apply the setting to everyone, leave the top organizational unit selected. Otherwise, select a child organizational unit.
  5. Click the app that you want to configure.
  6. Under Installation policy, choose Allow install, Force install, Force install + pin, or Block.
  7. Click Save.

Note: While a force-installed app is downloading on Chrome OS devices, users see a STOP button. If they click it, the download stops. Another installation attempt is made at the next sign in. Install attempts continue until the app successfully installs or is no longer part of the list of apps that are force-installed.

Allow the installation of any app

This feature is not available for education domains.

If you give your users full access to the managed Google Play store, they can search for and install any app on their Chrome OS devices, even apps you haven’t selected.

  1. Sign in to your Google Admin console.

    Sign in using your administrator account (does not end in @gmail.com).

  2. From the Admin console Home page, go to Devicesand thenChrome.
  3. Click Apps & extensionsand thenUsers & browsers.
  4. To apply the setting to everyone, leave the top organizational unit selected. Otherwise, select a child organizational unit.
  5. On the right, click Additional settings Settings.
  6. Go to Allow/block mode.
  7. Click Edit.
  8. Under Play Store, choose an option;
    • Allow all apps, admin manages blocklist—Users can install all apps from managed Google Play except the ones that you block.
    • Block all apps, admin manages allowlist—Users can only install the apps from managed Google Play that you allow.
  9. Click Save.

(Optional) Add private apps

You can use the managed Google Play store to host private Android apps for your organization. You can control who can download an app, and you can benefit from security checks, such as user authentication and malware detection.

To deploy private Android apps to Chrome OS devices, first publish the apps to the managed Google Play store. For details, see Manage private Android apps in Google Play.

  1. Sign in as an admin to managed Google Play.
  2. On the left, click Admin Settings and note your Organization ID.
  3. Go to the Google Play Console.
  4. Select your private app.
  5. Click Store Presence and then Pricing & distribution.
  6. Check the Privately target this app to a list of organizations box.
  7. Click Choose Organizations and add your Organization ID (noted in step 2).
  8. Click Submit Update.

It might take up to 24 hours to see the app in the My managed apps list. The managed Google Play help center contains detailed information on how to manage apps and app licenses for use in your organization.

Step 3: (Optional) Apply managed configurations to an Android app

For some apps and extensions, you can install custom policies. For example, a digital signage kiosk app might have a schedule of events that’s contained in a JavaScript Object Notation (JSON) file.

  1. Sign in to your Google Admin console.

    Sign in using your administrator account (does not end in @gmail.com).

  2. From the Admin console Home page, go to Devicesand thenChrome.
  3. Click Apps & extensionsand thenUsers & Browsers or Kiosks.
  4. To apply the setting to everyone, leave the top organizational unit selected. Otherwise, select a child organizational unit.
  5. Find and click the app that you want to configure policies for.
  6. On the right, under Managed configuration, enter the JSON data in the text field.
  7. Click Save.

Sample policy configuration files

The following sample configuration shows how to define a very restrictive block list that stops the app from accessing any URL. It also includes an allow list of specific URLs that the app can access:

{ "com.android.browser:URLBlocklist": "[\"*\"]"
"com.android.browser:URLAllowlist": "[\"www.solamora.com\", \"www.altostrat.com\”]" }

The following sample configuration shows how to specify all supported setting types (boolean, string, array, and object array):

{
"can_say_hello": true,
"message": "Hello, it's me",
"approvals": [ "read", "write" ],
"items": [{ "key": "key1", "value": "1"}, { "key": "key2", "value": "2"}]
}

Verify Android apps are available on users’ devices

Step 1: Open Google Play
After you enable Android apps for users in your organization, users see Play Store Play Store in the shelf at the bottom or side of the screen on their Chrome OS device.
  1. On a Chrome OS device, click Play Store Play Storeto open Google Play.
  2. Click Agree to accept the Terms of Service.
Step 2: Get Android apps
Users can install selected apps on their devices from Play StorePlay Store.
  1. On a Chrome OS device, click Play Store Play Storeto open Google Play.
  2. Click MenuMenuand thenStore Home.
  3. Browse or search for the app that you want to install and click it.
  4. Click Install.
  5. If prompted, review the requested access permissions and click Accept.

To see a list of the Android apps installed on the device, from the Menu Menu, click My work apps or My school apps.

Remove Android apps from Chrome OS devices

Remove apps
You can remove Android apps that you no longer want on user devices. The next time users sign in to their Chrome OS device, the app and its associated user data are removed. And, although users can still see the app in the library in managed Google Play, they can't install it.

Before you begin

If you give some users access to all apps in managed Google Play, you can’t modify the Allow installation setting (remove any Android apps) for those users.

Remove an app and its associated user data

  1. Sign in to your Google Admin console.

    Sign in using your administrator account (does not end in @gmail.com).

  2. From the Admin console Home page, go to Devicesand thenChrome.
  3. Click Apps & extensionsand thenUsers & browsers.
  4. To apply the setting to everyone, leave the top organizational unit selected. Otherwise, select a child organizational unit.
  5. Find and click the app that you want to remove.
  6. Under Installation policy, choose Block.
  7. Click Save.

Remove an app from the Admin Console

Users that already have the app installed will still be able to use it.

  1. Sign in to your Google Admin console.

    Sign in using your administrator account (does not end in @gmail.com).

  2. From the Admin console Home page, go to Devicesand thenChrome.
  3. Click Apps & extensionsand thenUsers & browsers.
  4. On the left, select the top-level organizational unit.
  5. Find and click the app that you want to remove.
  6. In the panel on the right, click RemoveRemove.
  7. Click Save.

(Optional) Run an Android app as a kiosk on a Chrome OS device

For information about how to push Android apps to a Chrome OS device in locked-down kiosk mode, see Use Android apps on Chrome devices running as a kiosk.

FAQs

Which Chrome OS devices support Android apps?
For a list of Chrome OS devices that support Android apps, read Chrome OS systems supporting Android apps.
Note: As an administrator, you need to enable Android apps for your domain before your users can install Android apps on their devices.
Can users install any Android app they want?
As an administrator, you can:
  1. Create and manage a list of Google Play apps to use in your organization. Learn more
  2. Choose how you want to install apps, depending on which organizational unit users belong to. Learn more
  3. Let users search for and install any Android app from managed Google Play. Learn more

Related topics

Google and related marks and logos are trademarks of Google LLC. All other company and product names are trademarks of the companies with which they are associated.

Was this helpful?
How can we improve it?
Search
Clear search
Close search
Google apps
Main menu
Search Help Center
true
410864
false