Manage Chrome Browser in Workspace ONE UEM (Android)
You can use VMware® Workspace ONE® Unified Endpoint Management (UEM) on Android to distribute Chrome Browser to your users and set some policies.
Important: Google does not provide support for any VMware issues. For help, contact VMware.
Before you begin
If you deploy Chrome to an Android version older than Android Q, you need to enable Android enterprise and configure it as the default enrollment method. Starting with Android Q, Google is no longer supporting Legacy MDM; Android enterprise is the only supported management method.
To configure Android enterprise, see VMware Workspace ONE UEM Android for Work.
This list might change as VMware or Google update the product, however, find available browser controls at Enforce Chrome Browser Settings (Android).
Create an Android profile
You need to create an Android management profile to apply Google Chrome policies.
- Open the Workspace ONE UEM.
- On the left, select Devices.
- From the Profiles and Resources list, select Profiles.
- From the Add list, select Add Profile.
- Select Android.
Do not select an Android (Legacy) profile. If you don’t see the Android (Legacy) option, you might not have Android enterprise enabled in UEM.
- On the General page, enter:
- your profile name
- deployment method
- On the left, click Chrome Browser Settings Configure to set up Chrome Browser policies.
- Enter the Chrome Browser settings details and click Save and Publish.
Workspace ONE applies the policies
When the Android management profile is saved and assigned to a Smart Group, Organization Group, or User Group, Workspace ONE starts deploying it using the assignment rules. The device needs to be turned on and online to get the new profile deployed to it. Because Workspace ONE deploys the profile using a batch workflow, the profile isn’t instantly deployed to all devices. The Workspace ONE admin can manually force a profile deployment on a specific device if needed.
Workspace ONE validates profile deployment
The Workspace ONE admin can check if the profile is deployed on a device by looking at the device profiles list. The admin can also check if the profile is applied successfully by entering chrome://policy in the browser of a managed device. This displays all applied policies.