Option A continued: (Optional) Advanced integration functionality

For administrators who manage ChromeOS devices for a business or school.

(Recommended) Turn off Google Drive sync

As an administrator, if your organization doesn’t sync to Google Drive, you can use your Admin console to turn off Google Drive sync.

1. Sign in with an administrator account to the Google Admin console.

   If you aren’t using an administrator account, you can’t access the Admin console.

2. Go to  Menu  Devices > Chrome > Settings. The User & browser settings page opens by default.

   Requires having the Mobile Device Management administrator privilege.

3. (Optional) To apply the setting only to some users, at the side, select an organizational unit (often used for departments) or configuration group (advanced). Show me how

   Group settings override organizational units. Learn more

4. Go to Content.
5. Click Google Drive syncing.
6. Select Disable Google Drive syncing.
7. Click Save.

(Recommended) Deactivate local storage

You can configure a cloud storage service, such as Microsoft OneDrive or Google Drive, as the only data storage option for ChromeOS devices in your organization. This prevents users from accessing local storage on their devices.

Switch to cloud-only storage

(Optional) Change the in-session Microsoft 365 icon

Google's research indicates that users might struggle to find the Office applications, even if the Microsoft 365 PWA is pinned to the shelf. The Office applications were easier for users to find when the Microsoft 365 PWA icon was changed.

1. Sign in with an administrator account to the Google Admin console.

   If you aren’t using an administrator account, you can’t access the Admin console.

2. Go to Menu  Devices > Chrome > Apps & extensions > Users & browsers.
3. (Optional) To apply the setting only to some users, at the side, select an organizational unit (often used for departments) or configuration group (advanced). Show me how

   Group settings override organizational units. Learn more

4. Find and click the Microsoft 365 PWA.
   Note: You can only customize the appearance of URLs that you force install.
5. In the panel that opens on the right, under Appearance, select Customize name and icon (ChromeOS only).
6. For Custom name, enter the name that you want to use. Google's research team recommends Microsoft 365 (Word, Excel, PowerPoint) to cover the most common search terms.
7. For Custom icon:
   1. Click Upload.
   2. Select the PNG, JPG, or JPEG file that you want.
   3. Click Open.
      Note: You can search for and download the icon that you wish to use. Sample search.
8. Click Save.

(Optional) Prevent tenant-wide admin consent to the Connect OneDrive ChromeOS app

1. Skip Step 1: Accept use of the Microsoft Connect OneDrive ChromeOS app.
2. Proceed to Step 2: Install the Microsoft 365 PWA on devices and follow the rest of the setup steps.
3. When setup is completed, trigger the OneDrive connect registration flow by using Microsoft Office for the web on a ChromeOS device:
   1. Using one of the accounts for which you just configured Office, sign in to a ChromeOS device.
   2. Open the FIles app.
   3. Trigger the authorization flow:
      • If you chose to add OneDrive automatically—Click the OneDrive icon on the left side of the panel. Then, click Sign in.
      • If you chose to allow users to add OneDrive—Click in the upper right corner. Then, click ServiceOneDrive. For additional information, go to Open & edit Office files on your Chromebook.
   4. Depending on whether single sign-on (SSO) is activated, you might need to reauthenticate to Entra ID with your username and password.
   5. After that, you will get asked to grant permissions to Connect OneDrive. You can stop here—Connect to OneDrive is not visible in the Microsoft Entra ID admin center.
4. Restrict user sign-in as needed. For details about how to configure the Connect OneDrive ChromeOS app to require user assignment and assign users or groups to the app, go to Microsoft Entra documentation.

(Optional) Restrict the integration to a subset of your users

To limit the automated or manual OneDrive integration on ChromeOS to a subset of your users, you can add additional configurations in the Google and Microsoft admin panel

1. In Azure, you can limit which users have access to the Connect OneDrive ChromeOS app by requiring user assignment and explicitly selecting users or user groups that can use the application (see Microsoft Documentation)
2. In the Google Admin console, to apply settings only to some users, at the side, select an organizational unit (often used for departments) or configuration group (advanced). Group settings override organizational units. Learn more about managing group-based policies.

(Optional) Force install the Outlook PWA

In addition to the Microsoft 365 PWA, you might also consider force-installing the Outlook PWA for your users. Follow the same steps as the Microsoft 365 PWA, Install the Microsoft 365 PWA on devices. However, instead of adding the Microsoft 365 PWA URL, you'll need to add https://outlook.office.com/mail/—the Outlook PWA URL.

(Optional) Set ChromeOS data controls

Protect your organization's data with ChromeOS Data Controls. For example, you can set up rules to prevent copy and paste, screen capture (screenshots and video capture), screen sharing, and printing. For instructions, go to Set ChromeOS data controls.

Google and related marks and logos are trademarks of Google LLC. All other company and product names are trademarks of the companies with which they are associated.