Set a Chrome policy for multiple apps

For administrators who manage Chrome policies from the Google Admin console.

As a Chrome Enterprise admin, you can use your Admin console to apply app and extension policies across several apps at a time. For example, you might specify all the apps you want to force install for users, or pin on users' Chrome task bars. 

Before you begin

To manage Chrome apps and extensions for users, you need to turn on their Chrome Web Store service in your Admin console. Find this service in your Admin console by going to Apps > Additional Google Services. For steps, see Turn Additional Google Services on or off.

Set app policies in User settings

Can apply for signed-in users on any device, or enrolled browsers on Windows, Mac, or Linux. Learn more

Set an app or extension policy (main steps)

Before you begin: To make settings for a specific group of users or enrolled Chrome Browsers, put the user accounts or browsers in an organizational unit.

  1. Sign in to your Google Admin console.

    Sign in using your administrator account (does not end in @gmail.com).

  2. From the Admin console Home page, go to Device managementand thenChrome management.

    If you don't see Device management on the Home page, click More controls at the bottom.

  3. Click User settings.
  4. On the left, select the organizational unit that contains the users or enrolled browsers you want to set the policy for.

    For all users or browsers, select the top-level organizational unit. Otherwise, select a child. Learn more

    Important: To apply settings for Chrome Browser users on Windows, Mac, or Linux computers, turn on Chrome Management and turn on the Chrome Web Store service, for this organizational unit.

  5. Scroll to Apps and Extensions.
  6. Locate the policy you want to set, and click the link to manage its settings. Learn about each setting.

    For example, to pin several apps to your Chromebook users' task bars, click Managed pinned apps.

    Policies you set for an organizational unit are inherited by its children, unless overridden at the lower level. The Admin console marks whether a setting is Inherited or overridden (marked Locally applied). Learn more (below)

  7. Locate and select each app or extension you want to set the policy for. Then click its Add link.

    Tip: To find apps, click filters at the left and use the search bar. Most apps are in the Chrome Web store. You can also find third-party or test apps. Help me find an app (below)

  8. Locate the app in the results, click its Add link, then click Save.
  9. At the bottom, click Save again.
Find a specific app or extension

When performing the steps above, here's how to find an app or extension you want to set policies for.

Chrome Web Store app or extension

  1. Follow steps above to select the policy you want to set in the Admin console.
  2. On the left, click Chrome Web Store.
  3. Enter the name of the app or extension.
  4. Press Enter to search the Chrome Web Store.
  5. Select the app or extension.
  6. Finish steps to add the app to this policy.

Trusted tester apps

To set a policy for an app or extension in the Chrome Web Store that's published to trusted testers:

  1. Follow steps above to select the policy you want to set in the Admin console.
  2. On the left, click Specify a Custom App.
  3. Enter the app or extension ID and URL.

    Contact the app developer for the ID and URL.

    If you're the developer, see how to find your app's ID and URL at Create a private Chrome app.

    Example of third-party URL: https://thirdparty.com/update.xml

  4. Finish steps to add the app to this policy.

Third-party apps

To set a policy for an app or extension that's not in the Web Store, such as from a third-party developer:

  1. Follow steps above to select the policy you want to set in the Admin console.
  2. On the left, click Specify a Custom App.
  3. For ID, enter the Chrome app or extension identity.
  4. For URL, enter https://clients2.google.com/service/update2/crx.
  5. Finish steps to add the app to this policy.
Understand how app settings are inherited

Initially, users in an organizational unit inherit app policy settings from its parent. For example, if you force-install App A at the top level, it's force-installed at all levels below. 

To change policies for users in a child organizational unit (and any children that inherit its policies), you can:

  • Remove App A from the child's force-install list. 
  • Add App B to force-install at the child level. 

The child organizational unit will no longer force-install App A. It will force-install App B. And it will force-install any other apps added later to its parent.

To summarize, when you add an app to a parent organizational unit, the app and its policies are inherited to the child–as long as the app is not already in the child and you have not overridden the top-level settings for it.

Related topics

Was this helpful?
How can we improve it?