DeviceAttributesBlockedForOrigins

Block Device Attributes API on these sites

Last updated August 13, 2025

Setting the policy blocks listed origins from getting device attributes (e.g. serial number, hostname) using the Device Attributes API. Origins must correspond to web applications that are force-installed Isolated Web Apps (using IsolatedWebAppInstallForceList policy) or set up as a kiosk app. For Device Attributes API specification please see https://wicg.github.io/WebApiDevice/device_attributes. For detailed information on valid url patterns, please see https://cloud.google.com/docs/chrome-enterprise/policies/url-patterns. * is not an accepted value for this policy.

Supported On:

Platform	Start	End
ChromeOS	140

Example value:

["https://www.google.com","[*.]example.com","example.edu","*://example.edu:*/","isolated-app://ggx2sheak3vpmm7vmjqnjwuzx3xwot3vdayrlgnvbkq2mp5lg4daaaic"]

Features:

Per Profile: true
Dynamic Refresh: true