Hi all
We are looking at trying to refine our processes of how we manage chrome across our estate. With both on-prem and intune set of devices management is a bit tricky with 2 sets of GPO/management profiles to maintain. We stumbled upon https://chromeenterprise.google/solutions/secure-browsing/ We have set up an account and everything seems semi straight forward. The main question we have is about syncing users or groups from AAD to Google and for that to understand what policies we want to assign to which user. Syncing users is the most obvious route however there appears to be a limit of 50 users to be synced for free. Is this correct if all we want to do is manage Chrome policies for those users? Could we sync the AD groups that the users are members of and manage the individual users that way across both on-prem and intune devices with some users crossing over and needing the same policies?
If the above would not work what would be the best way of achieving this? would we need a paid-for subscription from Google to achieve this? Ideally, we need google to understand members of groups as we want to ain't those in-house (azure on an on-prem ad which syncs) and then for google to understand that users in group 1 can access accounts.google.com for instance and users in groups 2, 3, 4,5, and 6 cannot etc.
Any advice would be appreciated as we cannot find a straight answer.
Regards
LinkedIn
Twitter
