Manage Chrome browser in Workspace ONE UEM (Android)

You can use VMware Workspace ONE Unified Endpoint Management (UEM) on Android to distribute Chrome browser to your users and set some policies.

Before you begin

If you deploy Chrome to an Android version older than Android Q, you need to enable Android enterprise and configure it as the default enrollment method. Starting with Android Q, Google is no longer supporting Legacy MDM; Android enterprise is the only supported management method.

To configure Android enterprise, see VMware Workspace ONE UEM Android for Work.

This list might change as VMware or Google update the product, however, find available browser controls at Enforce Chrome browser Settings (Android).

Create an Android profile

You need to create an Android management profile to apply Google Chrome policies.

1. Open the Workspace ONE UEM.
2. On the left, select Devices.
3. From the Profiles and Resources list, select Profiles. 
4. From the Add list, select Add Profile.
5. Select Android. 
   Do not select an Android (Legacy) profile. If you don’t see the Android (Legacy) option, you might not have Android enterprise enabled in UEM.
6. On the General page, enter:
   • your profile name 
   • deployment method
   • assignment
   Note: Separate each profile for each payload instead of bundling multiple payloads together. This makes updating payloads easier in the future and makes sure a payload change does not impact others.
7. On the left, click Chrome Browser Settings  Configure to set up Chrome browser policies.
8. Enter the Chrome browser settings details and click Save and Publish.

Workspace ONE applies the policies

When the Android management profile is saved and assigned to a Smart Group, Organization Group, or User Group, Workspace ONE starts deploying it using the assignment rules. The device needs to be turned on and online to get the new profile deployed to it. Because Workspace ONE deploys the profile using a batch workflow, the profile isn’t instantly deployed to all devices. The Workspace ONE admin can manually force a profile deployment on a specific device if needed.

Workspace ONE validates profile deployment

The Workspace ONE admin can check if the profile is deployed on a device by looking at the device profiles list. The admin can also check if the profile is applied successfully by entering chrome://policy in the browser of a managed device. This displays all applied policies.

Google and related marks and logos are trademarks of Google LLC. All other company and product names are trademarks of the companies with which they are associated.