Manage Chrome browser on Android devices

As an administrator, you can deploy and manage Chrome browser for users on Android devices. Use managed configurations to configure Chrome browser for a group or organizational unit without any user interaction. You can also create multiple managed configurations for Chrome browser and apply them to different groups and organizational units.

Before you begin

• Sign up for Google Workspace. For details, see Sign up for free Google Workspace  trial.
• Set up advanced mobile device management. For instructions, see Turn on advanced management .

Step 1: Approve Chrome browser

1. Sign in with an administrator account to the Google Admin console.

   If you aren’t using an administrator account, you can’t access the Admin console.

2. Go to Menu  Apps > Web and mobile apps .

   Requires having the Mobile Device Management administrator privilege.

3. Click Add app Search for apps.
4. Click Enter app nameand enter Google Chrome.
5. Point to the app and click Select.
6. Select how the user accesses the app.
   • To let users install the app themselves, select Available. With this option, users who don’t need the app don’t have to download it.
   • To install the app on all managed devices, select Force install. With this option, the app is automatically installed on all managed devices, with no option to opt out.
   • To apply a managed configuration before you force install the app, select  Available, complete these steps, apply the managed configuration, then edit the app settings to force install the app.
7. Configure app options:

   1. For devices under basic or advanced mobile management:

      • Automatically install the app on users' devices.

   2. For devices under advanced mobile management:

      • Prevent users from uninstalling the app.

      • Allow users to add an app widget (when available) for a home screen shortcut.

      • Set the app as the Always On VPNapp. When enabled, app traffic from a work profile or managed device must pass through this app. Requires Android 7.0 or later. This setting creates a more secure network connection for work profile traffic.

8. Click  Finish. The app's detail page opens automatically. When you return to the Web and mobile apps list, the app is listed almost immediately after you add it.

   Android apps are available for users to install from managed Google Play or the Work Apps tab of the Play Store the next time their device syncs with Google endpoint management. If a user installs an app from outside of the managed Google Play store or the Work Appstab, the app isn't managed.

Step 2: Create a managed configuration

1. Sign in with an administrator account to the Google Admin console.

   If you aren’t using an administrator account, you can’t access the Admin console.

2. Go to Menu  Apps > Web and mobile apps .

   Requires having the Mobile Device Management administrator privilege.

3. Click Google Chromeyou want to manage.

   Tip:To only see the apps that are allowed for a specific organizational unit or group, click Add a filterand select the organizational unit or group.

4. Click Managed Configurations Add Managed Configuration.
   If the app doesn’t support managed configurations, this option isn't available.
5. Enter a configuration name and set your preferred configuration.
   Note:The developer of the app defines the configuration options available to you. If you have questions about these settings, contact the developer.
6. Click Save.
7. Assign the managed configuration to an organizational unit or group, as described in the next section.

Step 3: Assign managed configurations

1. Sign in with an administrator account to the Google Admin console.

   If you aren’t using an administrator account, you can’t access the Admin console.

2. Go to Menu  Apps > Web and mobile apps .

   Requires having the Mobile Device Management administrator privilege.

3. Click Google Chrome.
4. Click  Settings.
5. At the left, click the organizational unit or group that you want to assign a managed configuration to.
6. Under  Managed configuration, click the menu and select the managed configuration you want to apply.
7. Click  Save.

To remove a managed configuration from an organizational unit or group, follow the same steps and select  Default.

Related topics

• Manage app permissions
• Manage apps on Android devices
• Manage mobile apps for your organization