SureMDM console allows you to manage your Chromebook fleet and their installed Chrome OS apps. SureMDM offers features to apply policies such as the Apps and Extensions Policy which also allows the installation of external extensions and blocks based on the permissions they require.
Purpose
The purpose of this knowledge article is to provide a guide on how to configure Apps and Extensions Policy for ChromeOS.
Prerequisites
NA
Steps
1. Navigate to SureMDM Web Console > Profiles > ChromeOS > Add >Apps and Extensions Policy > Configure.
2. Enter a Profile Name.
3. Select the desired Apps and Extensions Policy for Chrome OS Devices and click Save.
To know more about the Apps and Extensions Policy supported for Chrome OS Devices.
The description of each Apps and Extensions Policy is given in the table below:
| Apps and Extensions Policy | Descriptions |
| Allowed types of apps and extensions | Specifies the app types to block the device user from installing. |
| App and extension install sources | Specify an allowlist of sources from which the device user can directly install extensions, apps, and themes on the Chrome browser. If a URL linking to a CRX file (Chrome extension) matches an allowed listed pattern, the browser will prompt the user to immediately install it.NOTE — This policy has no effect on Android apps. To set policies for Android apps, see Deploy Android apps to manage users on Chrome OS devices. |
| Allow insecure extension packaging | Allows insecure extension packaging. |
| External extensions | Allows the installation of external extensions, which are extensions from outside the Chrome Web Store. |
| Permissions and URLs | Specify extensions to block based on the permissions they require. |
| Chrome Web Store app icon | Toggles the Chrome Web Store app link in the footer of the new tab page on Chrome Browser and in its app launcher. |
| Chrome Web Store permissions | Allow the device user to publish private apps that are restricted to your domain on the public Chrome Web Store. |
| Android reporting for users and devices | Toggles the monitoring and reporting of Android app installations forced by policy.. |
The newly created profile will be listed in the Profiles section.
- Return to the Home tab and select the device(s) or group(s).
- Click Apply to launch the Apply Job/profile To Device prompt.
- In the Apply Job/Profile To Device prompt, select the created profile and click Apply.
Need more help? Here’s how to get help from our experts.