1. Home
  2. Knowledge Base
  3. SureMDM
  4. How to configure Apps and Extensions Policy for a ChromeOS

How to configure Apps and Extensions Policy for a ChromeOS

SureMDM console allows you to manage your Chromebook fleet and their installed Chrome OS apps. SureMDM offers features to apply policies such as the Apps and Extensions Policy which also allows the installation of external extensions and blocks based on the permissions they require.


The purpose of this knowledge article is to provide a guide on how to configure Apps and Extensions Policy for ChromeOS.




1.  Navigate to SureMDM Web Console > Profiles > ChromeOS > Add >Apps and Extensions Policy > Configure.

2. Enter a Profile Name.

3. Select the desired Apps and Extensions Policy for Chrome OS Devices and click Save

To know more about the Apps and Extensions Policy supported for Chrome OS Devices.

The description of each Apps and Extensions Policy is given in the table below:

Apps and Extensions Policy Descriptions
Allowed types of apps and extensionsSpecifies the app types to block the device user from installing.
App and extension install sourcesSpecify an allowlist of sources from which the device user can directly install extensions, apps, and themes on the Chrome browser. If a URL linking to a CRX file (Chrome extension) matches an allowed listed pattern, the browser will prompt the user to immediately install it.NOTE — This policy has no effect on Android apps. To set policies for Android apps, see Deploy Android apps to manage users on Chrome OS devices.
Allow insecure extension packagingAllows insecure extension packaging.
External extensionsAllows the installation of external extensions, which are extensions from outside the Chrome Web Store. 
Permissions and URLsSpecify extensions to block based on the permissions they require. 
Chrome Web Store app iconToggles the Chrome Web Store app link in the footer of the new tab page on Chrome Browser and in its app launcher.
Chrome Web Store permissionsAllow the device user to publish private apps that are restricted to your domain on the public Chrome Web Store. 
Android reporting for users and devicesToggles the monitoring and reporting of Android app installations forced by policy..

The newly created profile will be listed in the Profiles section.

  1. Return to the Home tab and select the device(s) or group(s).
  2. Click Apply to launch the Apply Job/profile To Device prompt.
  3. In the Apply Job/Profile To Device prompt, select the created profile and click Apply.

Need more help? Here’s how to get help from our experts. 


Was this helpful?
Updated on July 2023