Property | What you can configure |
|---|---|
| Blocked URL patterns, up to 1,000. |
| Exceptions to |
| Block and exception lists specific to incognito mode, independent of the general ones. |
| Hosts exempt from the forced HTTPS upgrade. |
| Hosts that skip HSTS preload. |
| Domains excluded from Safe Browsing checks. |
| Domains excluded from the "looks like another site" warning. |
| Exceptions to Certificate Transparency enforcement. |
| Origins where every HTTP authentication scheme is allowed, ignoring |
| Whether users can continue past an SSL warning, globally or for specific origins. |
Property | What you can configure |
|---|---|
| Cookie behavior by default, per site, and for third parties. |
| Site access to the user's location. |
| Web push notifications. |
| JavaScript execution, globally or per site. |
| JIT compilation in the JS engine — performance against attack surface. |
| Advanced JS engine optimizations. |
| Pop-up windows. |
| Access to motion and light sensors. |
| Serial port access through the Web Serial API. |
| Access to nearby Bluetooth devices. |
| Access to connected USB devices. |
| User idle detection through the Idle Detection API. |
| Site access to the clipboard. |
| Automatic download of multiple files. |
| Automatic media playback. |
| Whether sites can check if the user has saved payment methods. |
| Permission to share a screen, window or tab from a website. |
| Augmented reality sessions through WebXR. |
| Site access to the local network or to the Device itself (loopback). Tied to Chrome's Local Network Access restriction. |
Property | What you can configure |
|---|---|
| Allow, disable or always force incognito mode. |
| Maximum retention per data type — history, passwords, autofill and others — in hours. |
| Turns off browsing history storage. |
| Excludes specific data types (bookmarks, passwords, tabs) from sync. |
| Shows or hides the history view grouped by topic. |
| Content suggestions on the new tab page. |
| Sending anonymized URLs to Google to improve search and browsing. |
| Reduces the |
| Sending domain reliability diagnostics. |
| Sending anonymous usage and crash reports. |
| Product surveys built into Chrome. |
| Which Google accounts are visible inside Chrome, by name pattern. |
Property | What you can configure |
|---|---|
| Whether Chrome can save new passwords. |
| Checks whether entered credentials have appeared in a breach. |
| Sharing saved passwords with family group members. |
| Whether a third-party password manager configured in Android can be used instead of Chrome's. |
| Autofill for addresses and payment cards. |
| Whether the user can sign in to Chrome with their Google account. Android does not support the forced mode. |
| Automatic sign-in to Microsoft properties through the Entra ID authentication broker. |
| Corporate integrated authentication (Kerberos, NTLM, Negotiate) against internal servers. |
| Automatic client certificate selection by site pattern. |
| Remote desktop App origins allowed to make WebAuthn requests. |
| Allows WebAuthn on sites with faulty TLS certificates. |
| Exempts specific origins from secure context restrictions, useful for internal Apps without TLS. |
Property | What you can configure |
|---|---|
| Safe Browsing level: off, standard or enhanced. |
| Sending extra data to Google to improve threat detection. |
| Real-time checks through a proxy that does not expose the user's IP. |
| Stops the user from continuing past a malicious site warning. |
| Blocks ads on sites flagged for intrusive advertising. |
| Restriction level for downloads considered dangerous. |
| Blocks screenshots taken through shortcuts or extensions. |
| Adult content filter based on Google's SafeSearch API. |
| Forces SafeSearch on Google Search. |
| Forces a minimum level of YouTube restricted mode. |
| Trusted root certificate management — adding, constraining or distrusting. |
| HTTPS enforcement and TLS ClientHello encryption (ECH). |
| Preference for compliance-oriented cryptographic algorithms, such as CNSA. |
| Isolates each site in its own process (Site Isolation) on Devices with more than 1 GB of RAM. |
Property | What you can configure |
|---|---|
| Availability of Google's AI mode in the address bar and new tab page. |
| General availability of the Gemini integration in Chrome. |
| Whether Gemini can act directly on web pages on the user's behalf, optionally restricted by URL. |
| The "Find and fill with Gemini" feature. |
| Chrome Finds, AI-assisted search over page content. |
| Form autofill assisted by generative AI. |
| Whether page content can be shared with AI Mode or Lens from the side panel. |
| Third-party AI integrations in the address bar, when the default search engine is not Google. |
| Download and use of the local AI model for on-device inference. |
Property | What you can configure |
|---|---|
| Homepage URL. |
| Uses the new tab page as the homepage. |
| Shows the home button in the toolbar. |
| Bookmark bar visibility, and whether the user can edit bookmarks. |
| Deploys a predefined bookmark folder, with subfolders, that the user cannot modify. |
The | Configures or forces your own default search engine instead of leaving the choice to the user. |
| Search suggestions in the address bar. |
| The Touch to Search feature. |
| Built-in page translation. |
| Whether printing from Chrome is allowed. |
| The built-in QR code generator. |
| Price tracking for products seen in the browser. |
| Google Cast availability. |
| Read-aloud for web pages. |
| Sending text between desktop Chrome and an Android Device linked by account. |
Property | What you can configure |
|---|---|
| Skips the Terms of Service dialog on first use. Applies only to Chrome Custom Tabs (CCT) on Fully Managed Devices. |
| Token for Chrome to enroll in Chrome Enterprise Core, Google's cloud management, alongside management through Applivery and AMAPI. |
| Precedence rules between cloud policies (Chrome Enterprise Core) and platform policies, the ones arriving through Applivery. |
| Merge rules when the same policy arrives from more than one management source. |
Symptom | Likely cause |
|---|---|
The list field blocks nothing | The value is not serialized as a JSON string. |
| Wrong value format for the field type — list against boolean against integer. |
An expected property is missing from the Applivery form | It may not be available in the Chrome version published on Play for that Device, or it may need a minimum Android version. Check in the Dashboard before assuming support is missing. |
Changes never reach the Device | Check the Policy was actually deployed to the right Device group, not just saved. |