Skip to main content

How to remove permissions from your managed browser extension deployment

Danielle avatar
Written by Danielle
Updated over a week ago

For managed browser extension deployments (not individual installations), you can remove the geolocation permission through your MDM by following the instructions below. Please note that removing this permission will prevent you from using features that rely on this permission, unless you reinstate the permission when you enable said features.

Note: The following updates must be made to every browser type you install to.

MacOS

In the extension force installation policy, or the appropriate policy you included the Nudge extension to be force installed, add <key>ExtensionSettings</key> and the dict block shown in the example below.

<?xml version="1.0" encoding="UTF-8"?>
<!DOCTYPE plist PUBLIC "-//Apple//DTD PLIST 1.0//EN" "http://www.apple.com/DTDs/PropertyList-1.0.dtd">
<plist version="1.0">
<dict>
<key>ExtensionInstallForcelist</key>
<array>
<string>diaecjfdpohehjhliaephjnpnlmeajfa;https://clients2.google.com/service/update2/crx</string>
</array>
<key>ExtensionSettings</key>
<dict>
<key>diaecjfdpohehjhliaephjnpnlmeajfa</key>
<dict>
<key>runtime_blocked_permissions</key>
<array>
<string>geolocation</string>
</array>
</dict>
</dict>
</dict>
</plist>

Windows

Registry Key (Direct or via GPO)

ExtensionSettings - located at:

HKEY_LOCAL_MACHINE\\SOFTWARE\\Policies\\Google\\Chrome

Create or update the existing REG_SZ value:

Name: ExtensionSettings Value: {"diaecjfdpohehjhliaephjnpnlmeajfa":{"runtime_blocked_permissions":["geolocation"]}}

Support

If you have any questions or concerns, please don't hesitate to reach out. We're here to help!

Did this answer your question?