OLD | NEW |
1 { | 1 { |
2 # policy_templates.json - Metafile for policy templates | 2 # policy_templates.json - Metafile for policy templates |
3 # | 3 # |
4 # The content of this file is evaluated as a Python expression. | 4 # The content of this file is evaluated as a Python expression. |
5 # | 5 # |
6 # This file is used as input to generate the following policy templates: | 6 # This file is used as input to generate the following policy templates: |
7 # ADM, ADMX+ADML, MCX/plist and html documentation. | 7 # ADM, ADMX+ADML, MCX/plist and html documentation. |
8 # | 8 # |
9 # Policy templates are user interface definitions or documents about the | 9 # Policy templates are user interface definitions or documents about the |
10 # policies that can be used to configure Chrome. Each policy is a name-value | 10 # policies that can be used to configure Chrome. Each policy is a name-value |
(...skipping 229 matching lines...) Expand 10 before | Expand all | Expand 10 after Loading... |
240 'caption': '''Configure the home page URL''', | 240 'caption': '''Configure the home page URL''', |
241 'tags': [], | 241 'tags': [], |
242 'desc': '''Configures the default home page URL in <ph name="PRODUCT_N
AME">$1<ex>Google Chrome</ex></ph> and prevents users from changing it. | 242 'desc': '''Configures the default home page URL in <ph name="PRODUCT_N
AME">$1<ex>Google Chrome</ex></ph> and prevents users from changing it. |
243 | 243 |
244 The home page is the page opened by the Home button. The pages that op
en on startup are controlled by the RestoreOnStartup policies. | 244 The home page is the page opened by the Home button. The pages that op
en on startup are controlled by the RestoreOnStartup policies. |
245 | 245 |
246 The home page type can either be set to a URL you specify here or set
to the New Tab Page. If you select the New Tab Page, then this policy does not t
ake effect. | 246 The home page type can either be set to a URL you specify here or set
to the New Tab Page. If you select the New Tab Page, then this policy does not t
ake effect. |
247 | 247 |
248 If you enable this setting, users cannot change their home page URL in
<ph name="PRODUCT_NAME">$1<ex>Google Chrome</ex></ph>, but they can still choos
e the New Tab Page as their home page. | 248 If you enable this setting, users cannot change their home page URL in
<ph name="PRODUCT_NAME">$1<ex>Google Chrome</ex></ph>, but they can still choos
e the New Tab Page as their home page. |
249 | 249 |
250 Leaving this policy not set will allow the user to choose his home pag
e on his own if HomepageIsNewTabPage is not set too. | 250 Leaving this policy not set will allow the user to choose their home p
age on their own if HomepageIsNewTabPage is not set too. |
251 | 251 |
252 This policy is not available on Windows instances that are not joined | 252 This policy is not available on Windows instances that are not joined |
253 to an Active Directory domain.''', | 253 to an Active Directory domain.''', |
254 'label': '''Home page URL''', | 254 'label': '''Home page URL''', |
255 }, | 255 }, |
256 { | 256 { |
257 'name': 'HomepageIsNewTabPage', | 257 'name': 'HomepageIsNewTabPage', |
258 'type': 'main', | 258 'type': 'main', |
259 'schema': { 'type': 'boolean' }, | 259 'schema': { 'type': 'boolean' }, |
260 'supported_on': ['chrome.*:8-', 'chrome_os:11-'], | 260 'supported_on': ['chrome.*:8-', 'chrome_os:11-'], |
261 'features': { | 261 'features': { |
262 'can_be_recommended': True, | 262 'can_be_recommended': True, |
263 'dynamic_refresh': True, | 263 'dynamic_refresh': True, |
264 'per_profile': True, | 264 'per_profile': True, |
265 }, | 265 }, |
266 'example_value': True, | 266 'example_value': True, |
267 'id': 2, | 267 'id': 2, |
268 'caption': '''Use New Tab Page as homepage''', | 268 'caption': '''Use New Tab Page as homepage''', |
269 'tags': [], | 269 'tags': [], |
270 'desc': '''Configures the type of the default home page in <ph name="P
RODUCT_NAME">$1<ex>Google Chrome</ex></ph> and prevents users from changing home
page preferences. The home page can either be set to a URL you specify or set t
o the New Tab Page. | 270 'desc': '''Configures the type of the default home page in <ph name="P
RODUCT_NAME">$1<ex>Google Chrome</ex></ph> and prevents users from changing home
page preferences. The home page can either be set to a URL you specify or set t
o the New Tab Page. |
271 | 271 |
272 If you enable this setting, the New Tab Page is always used for the ho
me page, and the home page URL location is ignored. | 272 If you enable this setting, the New Tab Page is always used for the ho
me page, and the home page URL location is ignored. |
273 | 273 |
274 If you disable this setting, the user's homepage will never be the New
Tab Page, unless its URL is set to 'chrome://newtab'. | 274 If you disable this setting, the user's homepage will never be the New
Tab Page, unless its URL is set to 'chrome://newtab'. |
275 | 275 |
276 If you enable or disable this setting, users cannot change their homep
age type in <ph name="PRODUCT_NAME">$1<ex>Google Chrome</ex></ph>. | 276 If you enable or disable this setting, users cannot change their homep
age type in <ph name="PRODUCT_NAME">$1<ex>Google Chrome</ex></ph>. |
277 | 277 |
278 Leaving this policy not set will allow the user to choose whether the
new tab page is his home page on his own. | 278 Leaving this policy not set will allow the user to choose whether the
new tab page is their home page on their own. |
279 | 279 |
280 This policy is not available on Windows instances that are not joined | 280 This policy is not available on Windows instances that are not joined |
281 to an Active Directory domain.''', | 281 to an Active Directory domain.''', |
282 }, | 282 }, |
283 ], | 283 ], |
284 }, | 284 }, |
285 { | 285 { |
286 'name': 'DefaultBrowserSettingEnabled', | 286 'name': 'DefaultBrowserSettingEnabled', |
287 'type': 'main', | 287 'type': 'main', |
288 'schema': { 'type': 'boolean' }, | 288 'schema': { 'type': 'boolean' }, |
(...skipping 3552 matching lines...) Expand 10 before | Expand all | Expand 10 after Loading... |
3841 'caption': '''Enable lock when the device become idle or suspended''', | 3841 'caption': '''Enable lock when the device become idle or suspended''', |
3842 'tags': [], | 3842 'tags': [], |
3843 'desc': '''Enable lock when <ph name="PRODUCT_OS_NAME">$2<ex>Google Chrome
OS</ex></ph> devices become idle or suspended. | 3843 'desc': '''Enable lock when <ph name="PRODUCT_OS_NAME">$2<ex>Google Chrome
OS</ex></ph> devices become idle or suspended. |
3844 | 3844 |
3845 If you enable this setting, users will be asked for a password to unlock t
he device from sleep. | 3845 If you enable this setting, users will be asked for a password to unlock t
he device from sleep. |
3846 | 3846 |
3847 If you disable this setting, users will not be asked for a password to unl
ock the device from sleep. | 3847 If you disable this setting, users will not be asked for a password to unl
ock the device from sleep. |
3848 | 3848 |
3849 If you enable or disable this setting, users cannot change or override it. | 3849 If you enable or disable this setting, users cannot change or override it. |
3850 | 3850 |
3851 If the policy is left not set the user can choose whether he wants to be a
sked for password to unlock the device or not.''', | 3851 If the policy is left not set the user can choose whether they want to be
asked for password to unlock the device or not.''', |
3852 }, | 3852 }, |
3853 { | 3853 { |
3854 'name': 'ChromeOsMultiProfileUserBehavior', | 3854 'name': 'ChromeOsMultiProfileUserBehavior', |
3855 'type': 'string-enum', | 3855 'type': 'string-enum', |
3856 'schema': { | 3856 'schema': { |
3857 'type': 'string', | 3857 'type': 'string', |
3858 'enum': [ | 3858 'enum': [ |
3859 'unrestricted', | 3859 'unrestricted', |
3860 'primary-only', | 3860 'primary-only', |
3861 'not-allowed', | 3861 'not-allowed', |
(...skipping 744 matching lines...) Expand 10 before | Expand all | Expand 10 after Loading... |
4606 'per_profile': True, | 4606 'per_profile': True, |
4607 }, | 4607 }, |
4608 'example_value': True, | 4608 'example_value': True, |
4609 'id': 245, | 4609 'id': 245, |
4610 'caption': '''Ephemeral profile''', | 4610 'caption': '''Ephemeral profile''', |
4611 'tags': [], | 4611 'tags': [], |
4612 'desc': '''If set to enabled this policy forces the profile to be switched
to ephemeral mode. If this policy is specified as an OS policy (e.g. GPO on Win
dows) it will apply to every profile on the system; if the policy is set as a Cl
oud policy it will apply only to a profile signed in with a managed account. | 4612 'desc': '''If set to enabled this policy forces the profile to be switched
to ephemeral mode. If this policy is specified as an OS policy (e.g. GPO on Win
dows) it will apply to every profile on the system; if the policy is set as a Cl
oud policy it will apply only to a profile signed in with a managed account. |
4613 | 4613 |
4614 In this mode the profile data is persisted on disk only for the length of
the user session. Features like browser history, extensions and their data, web
data like cookies and web databases are not preserved after the browser is close
d. However this does not prevent the user from downloading any data to disk manu
ally, save pages or print them. | 4614 In this mode the profile data is persisted on disk only for the length of
the user session. Features like browser history, extensions and their data, web
data like cookies and web databases are not preserved after the browser is close
d. However this does not prevent the user from downloading any data to disk manu
ally, save pages or print them. |
4615 | 4615 |
4616 If the user has enabled sync all this data is preserved in his sync profil
e just like with regular profiles. Incognito mode is also available if not expli
citly disabled by policy. | 4616 If the user has enabled sync all this data is preserved in their sync prof
ile just like with regular profiles. Incognito mode is also available if not exp
licitly disabled by policy. |
4617 | 4617 |
4618 If the policy is set to disabled or left not set signing in leads to regul
ar profiles.''' | 4618 If the policy is set to disabled or left not set signing in leads to regul
ar profiles.''' |
4619 }, | 4619 }, |
4620 { | 4620 { |
4621 'name': 'SAMLOfflineSigninTimeLimit', | 4621 'name': 'SAMLOfflineSigninTimeLimit', |
4622 'type': 'int', | 4622 'type': 'int', |
4623 'schema': { 'type': 'integer', 'minimum': -1 }, | 4623 'schema': { 'type': 'integer', 'minimum': -1 }, |
4624 'supported_on': ['chrome_os:34-'], | 4624 'supported_on': ['chrome_os:34-'], |
4625 'features': { | 4625 'features': { |
4626 'dynamic_refresh': True, | 4626 'dynamic_refresh': True, |
(...skipping 2984 matching lines...) Expand 10 before | Expand all | Expand 10 after Loading... |
7611 "description": "The SHA-256 hash of the avatar image.", | 7611 "description": "The SHA-256 hash of the avatar image.", |
7612 "type": "string" | 7612 "type": "string" |
7613 } | 7613 } |
7614 } | 7614 } |
7615 } | 7615 } |
7616 | 7616 |
7617 If this policy is set, <ph name="PRODUCT_OS_NAME">$2<ex>Google Chrome OS</
ex></ph> will download and use the avatar image. | 7617 If this policy is set, <ph name="PRODUCT_OS_NAME">$2<ex>Google Chrome OS</
ex></ph> will download and use the avatar image. |
7618 | 7618 |
7619 If you set this policy, users cannot change or override it. | 7619 If you set this policy, users cannot change or override it. |
7620 | 7620 |
7621 If the policy is left not set, the user can choose the avatar image repres
enting him/her on the login screen.''', | 7621 If the policy is left not set, the user can choose the avatar image repres
enting them on the login screen.''', |
7622 }, | 7622 }, |
7623 { | 7623 { |
7624 'name': 'WallpaperImage', | 7624 'name': 'WallpaperImage', |
7625 'type': 'external', | 7625 'type': 'external', |
7626 'schema': { | 7626 'schema': { |
7627 'type': 'object', | 7627 'type': 'object', |
7628 'properties': { | 7628 'properties': { |
7629 'url': { "type": "string" }, | 7629 'url': { "type": "string" }, |
7630 'hash': { "type": "string" } | 7630 'hash': { "type": "string" } |
7631 }, | 7631 }, |
(...skipping 82 matching lines...) Expand 10 before | Expand all | Expand 10 after Loading... |
7714 'dynamic_refresh': True, | 7714 'dynamic_refresh': True, |
7715 }, | 7715 }, |
7716 'example_value': True, | 7716 'example_value': True, |
7717 'id': 271, | 7717 'id': 271, |
7718 'caption': '''Transfer SAML IdP cookies during login''', | 7718 'caption': '''Transfer SAML IdP cookies during login''', |
7719 'tags': [], | 7719 'tags': [], |
7720 'desc': '''Specifies whether authentication cookies set by a SAML IdP duri
ng login should be transferred to the user's profile. | 7720 'desc': '''Specifies whether authentication cookies set by a SAML IdP duri
ng login should be transferred to the user's profile. |
7721 | 7721 |
7722 When a user authenticates via a SAML IdP during login, cookies set by the
IdP are written to a temporary profile at first. These cookies can be transferre
d to the user's profile to carry forward the authentication state. | 7722 When a user authenticates via a SAML IdP during login, cookies set by the
IdP are written to a temporary profile at first. These cookies can be transferre
d to the user's profile to carry forward the authentication state. |
7723 | 7723 |
7724 When this policy is set to true, cookies set by the IdP are transferred to
the user's profile every time he/she authenticates against the SAML IdP during
login. | 7724 When this policy is set to true, cookies set by the IdP are transferred to
the user's profile every time they authenticate against the SAML IdP during log
in. |
7725 | 7725 |
7726 When this policy is set to false or unset, cookies set by the IdP are tran
sferred to the user's profile during his/her first login on a device only. | 7726 When this policy is set to false or unset, cookies set by the IdP are tran
sferred to the user's profile during their first login on a device only. |
7727 | 7727 |
7728 This policy affects users whose domain matches the device's enrollment dom
ain only. For all other users, cookies set by the IdP are transferred to the use
r's profile during his/her first login on the device only.''', | 7728 This policy affects users whose domain matches the device's enrollment dom
ain only. For all other users, cookies set by the IdP are transferred to the use
r's profile during their first login on the device only.''', |
7729 }, | 7729 }, |
7730 { | 7730 { |
7731 'name': 'EasyUnlockAllowed', | 7731 'name': 'EasyUnlockAllowed', |
7732 'type': 'main', | 7732 'type': 'main', |
7733 'schema': { 'type': 'boolean' }, | 7733 'schema': { 'type': 'boolean' }, |
7734 'supported_on': ['chrome_os:38-'], | 7734 'supported_on': ['chrome_os:38-'], |
7735 'features': { | 7735 'features': { |
7736 'dynamic_refresh': True, | 7736 'dynamic_refresh': True, |
7737 'per_profile': True, | 7737 'per_profile': True, |
7738 }, | 7738 }, |
(...skipping 264 matching lines...) Expand 10 before | Expand all | Expand 10 after Loading... |
8003 'supported_on': [ 'chrome_os:44-'], | 8003 'supported_on': [ 'chrome_os:44-'], |
8004 'device_only': True, | 8004 'device_only': True, |
8005 'features': { | 8005 'features': { |
8006 'dynamic_refresh': True, | 8006 'dynamic_refresh': True, |
8007 }, | 8007 }, |
8008 'example_value': 'students.school.edu', | 8008 'example_value': 'students.school.edu', |
8009 'id': 297, | 8009 'id': 297, |
8010 'caption': '''Enable domain name autocomplete during user sign in''', | 8010 'caption': '''Enable domain name autocomplete during user sign in''', |
8011 'tags': [], | 8011 'tags': [], |
8012 'desc': '''If this policy is set to a blank string or not configured, <ph
name="PRODUCT_OS_NAME">$2<ex>Google Chrome OS</ex></ph> will not show an autocom
plete option during user sign-in flow. | 8012 'desc': '''If this policy is set to a blank string or not configured, <ph
name="PRODUCT_OS_NAME">$2<ex>Google Chrome OS</ex></ph> will not show an autocom
plete option during user sign-in flow. |
8013 If this policy is set to a string representing a domain name, <ph name="PR
ODUCT_OS_NAME">$2<ex>Google Chrome OS</ex></ph> will show an autocomplete option
during user sign-in allowing the user to type in only his user name without the
domain name extension. The user will be able to overwrite this domain name ext
ension.''', | 8013 If this policy is set to a string representing a domain name, <ph name="PR
ODUCT_OS_NAME">$2<ex>Google Chrome OS</ex></ph> will show an autocomplete option
during user sign-in allowing the user to type in only their user name without t
he domain name extension. The user will be able to overwrite this domain name e
xtension.''', |
8014 }, | 8014 }, |
8015 { | 8015 { |
8016 'name': 'ForceMaximizeOnFirstRun', | 8016 'name': 'ForceMaximizeOnFirstRun', |
8017 'type': 'main', | 8017 'type': 'main', |
8018 'schema': { 'type': 'boolean' }, | 8018 'schema': { 'type': 'boolean' }, |
8019 'supported_on': ['chrome_os:43-'], | 8019 'supported_on': ['chrome_os:43-'], |
8020 'features': { | 8020 'features': { |
8021 'dynamic_refresh': False, | 8021 'dynamic_refresh': False, |
8022 'per_profile': True, | 8022 'per_profile': True, |
8023 }, | 8023 }, |
(...skipping 327 matching lines...) Expand 10 before | Expand all | Expand 10 after Loading... |
8351 'device_only': True, | 8351 'device_only': True, |
8352 'features': { | 8352 'features': { |
8353 'dynamic_refresh': False, | 8353 'dynamic_refresh': False, |
8354 }, | 8354 }, |
8355 'example_value': True, | 8355 'example_value': True, |
8356 'id': 323, | 8356 'id': 323, |
8357 'caption': '''Allow bluetooth on device''', | 8357 'caption': '''Allow bluetooth on device''', |
8358 'tags': [], | 8358 'tags': [], |
8359 'desc': '''If this policy is set to false, <ph name="PRODUCT_OS_NAME">$2<e
x>Google Chrome OS</ex></ph> will disable Bluetooth and the user cannot enable i
t back. | 8359 'desc': '''If this policy is set to false, <ph name="PRODUCT_OS_NAME">$2<e
x>Google Chrome OS</ex></ph> will disable Bluetooth and the user cannot enable i
t back. |
8360 | 8360 |
8361 If this policy is set to true or left unset, the user will be able to enab
le or disable Bluetooth as he wishes. | 8361 If this policy is set to true or left unset, the user will be able to enab
le or disable Bluetooth as they wish. |
8362 | 8362 |
8363 If this policy is set, the user cannot change or override it. | 8363 If this policy is set, the user cannot change or override it. |
8364 | 8364 |
8365 After enabling Bluetooth, the device must be rebooted for the changes to t
ake effect (no need to reboot the device when disabling Bluetooth).''', | 8365 After enabling Bluetooth, the device must be rebooted for the changes to t
ake effect (no need to reboot the device when disabling Bluetooth).''', |
8366 }, | 8366 }, |
8367 { | 8367 { |
8368 'name': 'SuppressUnsupportedOSWarning', | 8368 'name': 'SuppressUnsupportedOSWarning', |
8369 'caption': '''Suppress the unsupported OS warning''', | 8369 'caption': '''Suppress the unsupported OS warning''', |
8370 'desc': '''Suppresses the warning that appears when <ph name="PRODUCT_NAME
">$1<ex>Google Chrome</ex></ph> is running on a computer or operating system tha
t is no longer supported.''', | 8370 'desc': '''Suppresses the warning that appears when <ph name="PRODUCT_NAME
">$1<ex>Google Chrome</ex></ph> is running on a computer or operating system tha
t is no longer supported.''', |
8371 'type': 'main', | 8371 'type': 'main', |
(...skipping 382 matching lines...) Expand 10 before | Expand all | Expand 10 after Loading... |
8754 'desc': '''Text appended in parentheses next to the policies top-level con
tainer to indicate that those policies are of the Recommended level''', | 8754 'desc': '''Text appended in parentheses next to the policies top-level con
tainer to indicate that those policies are of the Recommended level''', |
8755 'text': 'Default Settings (users can override)', | 8755 'text': 'Default Settings (users can override)', |
8756 }, | 8756 }, |
8757 'doc_complex_policies_on_windows': { | 8757 'doc_complex_policies_on_windows': { |
8758 'desc': '''Text pointing the user to a help article for complex policies o
n Windows''', | 8758 'desc': '''Text pointing the user to a help article for complex policies o
n Windows''', |
8759 'text': '''encoded as a JSON string, for details see <ph name="COMPLEX_POL
ICIES_URL">https://www.chromium.org/administrators/complex-policies-on-windows<e
x>https://www.chromium.org/administrators/complex-policies-on-windows</ex></ph>'
'', | 8759 'text': '''encoded as a JSON string, for details see <ph name="COMPLEX_POL
ICIES_URL">https://www.chromium.org/administrators/complex-policies-on-windows<e
x>https://www.chromium.org/administrators/complex-policies-on-windows</ex></ph>'
'', |
8760 }, | 8760 }, |
8761 }, | 8761 }, |
8762 'placeholders': [], | 8762 'placeholders': [], |
8763 } | 8763 } |
OLD | NEW |