Set whether users can install Marketplace apps

As an administrator, you can allow users in your organization to install and run any Google Workspace Marketplace app, only allowlisted apps, or no apps. If you don’t allow users to install apps themselves or only allowlisted apps, you can still install any apps for them.

Marketplace supports draft app listings, which are versions of apps that developers use to test features and updates. Users in your organization might install a draft version of an app. Users can opt-out from a draft app that they were added to by contacting the app’s developer using a URL published on the app’s listing page. Learn more about draft app listings.

Understand Marketplace app installation and access controls

• If you change the setting to one that’s more restrictive, your users might lose access to apps that they previously installed.
• If you limit the Marketplace apps users can install, you can still install apps for them and they can use those admin-installed apps.
• For some Google Workspace services, you can allow or block third-party apps and add-ons for just that service. For details, see Allow third-party apps for Drive files, Allow or restrict add-ons in Docs editors, Allow users to install Chat apps, and Allow add-ons for Calendar. These service-specific settings override the Marketplace installation setting described on this page.
• API controls override the allowlist and can limit which Google services apps can access. Learn more about setting API controls and how they interact with Marketplace settings.
• Limiting add-ons restricts users from installing or running specified add-ons, including any triggers set up by those add-ons.

Allow or block users from installing Marketplace apps

1. Sign in to your Google Admin console.

   Sign in using your administrator account (does not end in @gmail.com).

2. In the Admin console, go to Menu  AppsGoogle Workspace Marketplace appsApps list.
3. Click User Install Settings.
4. (Optional) To apply the setting only to some users, at the side, select an organizational unit (often used for departments) or configuration group (advanced). Show me how

   Group settings override organizational units. Learn more

5. In the Manage access to apps section, select whether users can install any apps, only allowlisted apps, or no apps. Learn more about how the allowlist works.
6. (Optional) If you choose to allow only allowlisted apps, you can also choose if users can install all internal apps, even if they’re not on your allowlist.
7. Click Save. Or, you might click Override for an organizational unit.

   To later restore the inherited value, click Inherit (or Unset for a group).

Changes can take up to 24 hours but typically happen more quickly. Learn more

Related topics

• Manage data access for admin-installed Marketplace apps
• View which apps are turned on for a user, group, or organizational unit
• Control which third-party & internal apps access Google Workspace data