As an administrator, you can deploy and manage Chrome browser for users on Android devices. Use managed configurations to configure Chrome browser for a group or organizational unit without any user interaction. You can also create multiple managed configurations for Chrome browser and apply them to different groups and organizational units.
Before you begin
- Sign up for Google Workspace. For details, see Sign up for free Google Workspace trial.
- Set up advanced mobile device management. For instructions, see Turn on advanced management.
Step 1: Approve Chrome browser
-
Sign in to your Google Admin console.
Sign in using your administrator account (does not end in @gmail.com).
-
In the Admin console, go to Menu
Apps
Web and mobile apps.
- Click Add app
- Click Enter app name and enter Google Chrome.
- Point to the app and click Select.
- Select how the user accesses the app.
- To let users install the app themselves, select Available. With this option, users who don’t need the app don’t have to download it.
- To install the app on all managed devices, select Force install. With this option, the app is automatically installed on all managed devices, with no option to opt out.
- To apply a managed configuration before you force install the app, select Available, complete these steps, apply the managed configuration, then edit the app settings to force install the app.
- Configure app options:
-
For devices under basic or advanced mobile management:
-
Automatically install the app on users' devices.
-
-
For devices under advanced mobile management:
-
Prevent users from uninstalling the app.
-
Allow users to add an app widget (when available) for a home screen shortcut.
-
Set the app as the Always On VPN app. When enabled, app traffic from a work profile or managed device must pass through this app. Requires Android 7.0 or later. This setting creates a more secure network connection for work profile traffic.
-
-
- Click Finish. The app's detail page opens automatically. When you return to the Web and mobile apps list, the app is listed almost immediately after you add it.
Android apps are available for users to install from managed Google Play or the Work Apps tab of the Play Store the next time their device syncs with Google endpoint management. If a user installs an app from outside of the managed Google Play store or the Work Apps tab, the app isn't managed.
Step 2: Create a managed configuration
-
Sign in to your Google Admin console.
Sign in using your administrator account (does not end in @gmail.com).
-
In the Admin console, go to Menu
- Click Google Chrome you want to manage.
Tip: To only see the apps that are allowed for a specific organizational unit or group, click
Add a filter and select the organizational unit or group.
- Click Managed Configurations
If the app doesn’t support managed configurations, this option isn't available. - Enter a configuration name and set your preferred configuration.
Note: The developer of the app defines the configuration options available to you. If you have questions about these settings, contact the developer. - Click Save.
- Assign the managed configuration to an organizational unit or group, as described in the next section.
Step 3: Assign managed configurations
-
Sign in to your Google Admin console.
Sign in using your administrator account (does not end in @gmail.com).
-
In the Admin console, go to Menu
- Click Google Chrome.
- Click Settings.
- At the left, click the organizational unit or group that you want to assign a managed configuration to.
- Under Managed configuration, click the menu and select the managed configuration you want to apply.
- Click Save.
To remove a managed configuration from an organizational unit or group, follow the same steps and select Default.