Manage Chrome Browser in Workspace ONE UEM (Android)

You can use VMware® Workspace ONE® Unified Endpoint Management (UEM) on Android to distribute Chrome Browser to your users and set some policies. 

Before you begin

If you deploy Chrome to an Android version older than Android Q, you need to enable Android enterprise and configure it as the default enrollment method. Starting with Android Q, Google is no longer supporting Legacy MDM; Android enterprise is the only supported management method.

To configure Android enterprise, see VMware Workspace ONE UEM Android for Work.

This list might change as VMware or Google update the product, however, find available browser controls at Enforce Chrome Browser Settings (Android).

Create an Android profile

You need to create an Android management profile to apply Google Chrome policies.

  1. Open the Workspace ONE UEM.
  2. On the left, select Devices.
  3. From the Profiles and Resources list, select Profiles
  4. From the Add list, select Add Profile.
  5. Select Android
    Do not select an Android (Legacy) profile. If you don’t see the Android (Legacy) option, you might not have Android enterprise enabled in UEM.
  6. On the General page, enter:
    • your profile name 
    • deployment method
    • assignment
    Note: Separate each profile for each payload instead of bundling multiple payloads together. This makes updating payloads easier in the future and makes sure a payload change does not impact others.
  7. On the left, click Chrome Browser Settings and then Configure to set up Chrome Browser policies.
  8. Enter the Chrome Browser settings details and click Save and Publish.

Workspace ONE applies the policies

When the Android management profile is saved and assigned to a Smart Group, Organization Group, or User Group, Workspace ONE starts deploying it using the assignment rules. The device needs to be turned on and online to get the new profile deployed to it. Because Workspace ONE deploys the profile using a batch workflow, the profile isn’t instantly deployed to all devices. The Workspace ONE admin can manually force a profile deployment on a specific device if needed.

Workspace ONE validates profile deployment

The Workspace ONE admin can check if the profile is deployed on a device by looking at the device profiles list. The admin can also check if the profile is applied successfully by entering chrome://policy in the browser of a managed device. This displays all applied policies.

Was this helpful?
How can we improve it?