# Device Profiles for Chromebook

Last updated: August 14, 2026

This page introduces Device Profiles for Chromebook, explaining how they apply restrictions and policies to the entire device regardless of which user is signed in. Administrators can explore the supported profile types — including Enrollment and Access, Sign-in Settings, Device Update Settings, Kiosk Settings, and Other Settings — to understand how each controls specific aspects of Chrome OS management, serving as a starting point for configuring organization-wide Chromebook policies.

As the name suggests, device profiles ensure the restrictions and policies are applied to the entire device. Thus, if you provision a device profile, the restrictions and policies are applied to the device irrespective of the users utilizing Chromebook. You can learn more about the device profiles applicable for Chrome OS below:

## Chromebook Device Profiles

- **Enrollment and Access:** Admins can manage the enrollment and access of chrome devices in their organization. When a device has been completely wiped, you can enforce re-enrollment on chrome devices. Allow users to restore the device to its factory reset state. You can also configure Verified access, Verified mode, device return instructions and Two Factor Authentication (TFA) on the Chromebooks.
- **Sign-in Settings:** You can configure the Sign-in Settings to manage users' sign-in and control the Guest sessions on Chrome devices. These settings allow you to determine which users are permitted to sign in and specify whether to allow Guest sessions on Chromebooks.
- **Device Update Settings:** Configure and manage OS and app updates on Managed Chrome devices. You can allow devices to update OS automatically and schedule the update rollout plan on Chromebooks.
- **Kiosk Settings:** You can lock down the Chromebooks with certain apps using Kiosk mode and configure kiosk settings such as Kiosk accessibility, Kiosk power settings, URL block listing, Display settings etc.
- **Other Settings:** You can manage the device network settings, USB access, Bluetooth services on the Chromebooks. Additionally, you can configure display settings, power and shutdown etc.

To know more about the list of ChromeOS policies and restrictions available in Google Admin Console, [click here](https://support.google.com/chrome/a/answer/1375678?sjid=7472267529785126522-AP).

## Frequently Asked Questions

**What is the difference between a device profile and a user profile on Chromebook?**

A device profile applies its restrictions and policies to the entire Chromebook, regardless of who signs in, while a user profile applies only to a specific user's sign-in session, following that user across any managed Chromebook they use.

**Which Chromebook settings are covered under Kiosk Settings?**

Kiosk Settings let you lock down a Chromebook to specific apps, and configure related options such as Kiosk accessibility, Kiosk power settings, URL block listing, and display settings.

**Can I control OS and app updates on managed Chromebooks?**

Yes. Device Update Settings let you allow devices to update their OS automatically and schedule the update rollout plan on Chromebooks.