Update Chrome-Policies.md
Some checks failed
Push wiki / pushwiki (push) Has been cancelled
Build and test GAM / build (build, 1, Build Intel Ubuntu Jammy, ubuntu-22.04) (push) Has been cancelled
Build and test GAM / build (build, 10, Build Intel Windows, windows-2022) (push) Has been cancelled
Build and test GAM / build (build, 11, Build Arm Windows, windows-11-arm) (push) Has been cancelled
Build and test GAM / build (build, 2, Build Intel Ubuntu Noble, ubuntu-24.04) (push) Has been cancelled
Build and test GAM / build (build, 3, Build Arm Ubuntu Noble, ubuntu-24.04-arm) (push) Has been cancelled
Build and test GAM / build (build, 4, Build Arm Ubuntu Jammy, ubuntu-22.04-arm) (push) Has been cancelled
Build and test GAM / build (build, 5, Build Intel StaticX Legacy, ubuntu-22.04, yes) (push) Has been cancelled
Build and test GAM / build (build, 6, Build Arm StaticX Legacy, ubuntu-22.04-arm, yes) (push) Has been cancelled
Build and test GAM / build (build, 7, Build Intel MacOS, macos-13) (push) Has been cancelled
Build and test GAM / build (build, 8, Build Arm MacOS 14, macos-14) (push) Has been cancelled
Build and test GAM / build (build, 9, Build Arm MacOS 15, macos-15) (push) Has been cancelled
Build and test GAM / build (test, 12, Test Python 3.10, ubuntu-24.04, 3.10) (push) Has been cancelled
Build and test GAM / build (test, 13, Test Python 3.11, ubuntu-24.04, 3.11) (push) Has been cancelled
Build and test GAM / build (test, 14, Test Python 3.12, ubuntu-24.04, 3.12) (push) Has been cancelled
Build and test GAM / build (test, 15, Test Python 3.14-dev, ubuntu-24.04, 3.14-dev) (push) Has been cancelled
Build and test GAM / merge (push) Has been cancelled
Build and test GAM / publish (push) Has been cancelled
Check for Google Root CA Updates / check-apis (push) Has been cancelled
CodeQL / Analyze (python) (push) Has been cancelled

This commit is contained in:
Ross Scroggs
2025-06-13 11:55:03 -07:00
parent 8d3b65f5f1
commit 74924c9c0e

View File

@@ -4266,6 +4266,13 @@ chrome.devices.MobileDataRoaming: Mobile data roaming.
true: Allow mobile data roaming. true: Allow mobile data roaming.
false: Do not allow mobile data roaming. false: Do not allow mobile data roaming.
chrome.devices.PartnerAccess: Allow EMM partners access to device management.
chromeDeviceManagementApiEnabled: TYPE_BOOL
true: Enable Chrome management - partner access.
false: Disable Chrome management - partner access.
ackNoticeForChromeDeviceManagementApiEnabledSetToTrue: TYPE_BOOL
This field must be set to true to acknowledge the notice message associated with the field 'chrome_device_management_api_enabled' set to value 'true'. Please sse the notices listed with this policy for more information.
chrome.devices.PowerManagement: Power management. chrome.devices.PowerManagement: Power management.
loginScreenPowerManagement: TYPE_BOOL loginScreenPowerManagement: TYPE_BOOL
true: Allow device to sleep/shut down when idle on the sign-in screen. true: Allow device to sleep/shut down when idle on the sign-in screen.
@@ -5979,6 +5986,9 @@ chrome.users.appsconfig.AllowedAppTypes: Allowed types of apps and extensions.
platform_app: Chrome packaged app. platform_app: Chrome packaged app.
chrome.users.appsconfig.AllowedInstallSources: Allows setting of the allowed install sources for apps. Note these must be set together. chrome.users.appsconfig.AllowedInstallSources: Allows setting of the allowed install sources for apps. Note these must be set together.
playStoreInstallSources: TYPE_ENUM
ALLOW_ALL_APPS: All apps allowed, admin manages blocklist.
BLOCK_ALL_APPS: All apps blocked, admin manages allowlist.
chromeWebStoreInstallSources: TYPE_ENUM chromeWebStoreInstallSources: TYPE_ENUM
ALLOW_ALL_APPS: All apps allowed, admin manages blocklist. ALLOW_ALL_APPS: All apps allowed, admin manages blocklist.
BLOCK_ALL_APPS: All apps blocked, admin manages allowlist. BLOCK_ALL_APPS: All apps blocked, admin manages allowlist.
@@ -7855,6 +7865,11 @@ chrome.users.InsertKeyModifier: Control the shortcut used to trigger the Insert
MANDATORY: Do not allow users to override. MANDATORY: Do not allow users to override.
RECOMMENDED: Allow users to override. RECOMMENDED: Allow users to override.
chrome.users.InstantTetheringAllowed: Instant Tethering.
instantTetheringAllowed: TYPE_BOOL
true: Allow users to use Instant Tethering.
false: Do not allow users to use Instant Tethering.
chrome.users.IntegratedWebAuthenticationAllowed: Login credentials for network authentication. chrome.users.IntegratedWebAuthenticationAllowed: Login credentials for network authentication.
integratedWebAuthenticationAllowed: TYPE_BOOL integratedWebAuthenticationAllowed: TYPE_BOOL
true: Use login credentials for network authentication to a managed proxy. true: Use login credentials for network authentication to a managed proxy.
@@ -8991,6 +9006,11 @@ chrome.users.SecondaryGoogleAccountSignin: Sign-in to secondary accounts.
allowedDomainsForApps: TYPE_LIST allowedDomainsForApps: TYPE_LIST
Whether the OS version updates will be set to a version defined in the manifest of a kiosk app. Whether the OS version updates will be set to a version defined in the manifest of a kiosk app.
chrome.users.SecondaryGoogleAccountUsage: Managed account as secondary account.
secondaryGoogleAccountUsage: TYPE_ENUM
ALL: All usages of managed accounts are allowed.
PRIMARY_ACCOUNT_SIGNIN: Block addition of a managed account as secondary account (in-session).
chrome.users.SecurityKeyAttestation: Security key attestation. chrome.users.SecurityKeyAttestation: Security key attestation.
securityKeyPermitAttestation: TYPE_LIST securityKeyPermitAttestation: TYPE_LIST
Enter URL or domain. Specifies URLs and domains for which no prompt will be shown when attestation certificates from security keys are requested. Additionally, a signal will be sent to the security key indicating that individual attestation may be used. Without this, users will be prompted in Chrome 65+ when sites request attestation of security keys. URLs (like "https://example.com/some/path") will only match as U2F AppIDs. Domains (like "example.com") only match as WebAuthn RP IDs. Thus, to cover both U2F and WebAuthn APIs for a given site, both the AppID URL and domain would need to be listed. Enter URL or domain. Specifies URLs and domains for which no prompt will be shown when attestation certificates from security keys are requested. Additionally, a signal will be sent to the security key indicating that individual attestation may be used. Without this, users will be prompted in Chrome 65+ when sites request attestation of security keys. URLs (like "https://example.com/some/path") will only match as U2F AppIDs. Domains (like "example.com") only match as WebAuthn RP IDs. Thus, to cover both U2F and WebAuthn APIs for a given site, both the AppID URL and domain would need to be listed.
@@ -9211,6 +9231,7 @@ chrome.users.SiteSearchSettings: Site search.
name: TYPE_STRING name: TYPE_STRING
shortcut: TYPE_STRING shortcut: TYPE_STRING
url: TYPE_STRING url: TYPE_STRING
allowUserOverride: TYPE_BOOL
chrome.users.SmartLockAllowed: Smart Lock. chrome.users.SmartLockAllowed: Smart Lock.
smartLockAllowed: TYPE_BOOL smartLockAllowed: TYPE_BOOL
@@ -9226,6 +9247,11 @@ chrome.users.SmartScreenDimDelay: Delay screen dim on user activity.
true: Enable smart dim model. true: Enable smart dim model.
false: Disable smart dim model. false: Disable smart dim model.
chrome.users.SmsMessagesAllowed: Messages.
smsMessagesAllowed: TYPE_BOOL
true: Allow users to sync SMS messages between their phone and Chromebook.
false: Do not allow users to sync SMS messages between their phone and Chromebook.
chrome.users.SpellcheckEnabled: Spell check. chrome.users.SpellcheckEnabled: Spell check.
spellcheckEnabled: TYPE_ENUM spellcheckEnabled: TYPE_ENUM
UNSET: Allow the user to decide. UNSET: Allow the user to decide.
@@ -9919,4 +9945,5 @@ chrome.users.ZstdContentEncodingEnabled: Zstd compression.
true: Allow zstd-compressed web content. true: Allow zstd-compressed web content.
false: Do not allow zstd-compressed web content. false: Do not allow zstd-compressed web content.
``` ```