caption: Configure minimum allowed <ph name="PRODUCT_OS_NAME">$2<ex>Google ChromeOS</ex></ph>
version for the device.
desc: |-
Configures the requirement of the minimum allowed version of <ph name="PRODUCT_OS_NAME">$2<ex>Google ChromeOS</ex></ph>.
When this policy is set to a non-empty list:
If none of the entries has a <ph name="CHROMEOS_VERSION_PROPERTY_NAME">chromeos_version</ph> greater than the current version of the device, then no restrictions are applied and the already existing restrictions are revoked.
If at least one of the entries has a <ph name="CHROMEOS_VERSION_PROPERTY_NAME">chromeos_version</ph> greater than the current version, the entry whose version is greater and closest to the current version is chosen.
In case of conflict, preference is given to the entry with lower <ph name="WARNING_PERIOD_PROPERTY_NAME">warning_period</ph> or <ph name="AUE_WARNING_PERIOD_PROPERTY_NAME">aue_warning_period</ph> and the policy is applied using that entry.
If the current version becomes obsolete during user session and the current network limits auto updates, an on-screen notification is shown to update the device within the <ph name="WARNING_PERIOD_PROPERTY_NAME">warning_period</ph> shown in the notification.
No notifications are shown if the current network allows auto updates and the device must be updated within the <ph name="WARNING_PERIOD_PROPERTY_NAME">warning_period</ph>.
The <ph name="WARNING_PERIOD_PROPERTY_NAME">warning_period</ph> starts from the time the policy is applied.
If the device is not updated till the expiry of the <ph name="WARNING_PERIOD_PROPERTY_NAME">warning_period</ph>, the user is signed out of the session.
If the current version is found to be obsolete at the time of login with expired <ph name="WARNING_PERIOD_PROPERTY_NAME">warning_period</ph>, the user is required to update the device before signing in.
If the current version becomes obsolete during user session and the device has reached auto update expiration, an on-screen notification is shown to return the device within <ph name="AUE_WARNING_PERIOD_PROPERTY_NAME">aue_warning_period</ph>.
If the device is found to have reached auto update expiration at the time of login with expired <ph name="AUE_WARNING_PERIOD_PROPERTY_NAME">aue_warning_period</ph>, the device is blocked for any user to sign in.
Unmanaged user sessions do not receive notifications and force log out if <ph name="UNMANAGED_USER_RESTRICTED_PROPERTY_NAME">unmanaged_user_restricted</ph> is unset or set to False.
If this policy is not set or set to empty, no restrictions are applied, already existing restrictions are revoked and user can sign in regardless of <ph name="PRODUCT_OS_NAME">$2<ex>Google ChromeOS</ex></ph> version.
Here <ph name="CHROMEOS_VERSION_PROPERTY_NAME">chromeos_version</ph> can be either an exact version like '13305.0.0' or a version prefix, like '13305'.
The <ph name="WARNING_PERIOD_PROPERTY_NAME">warning_period</ph> and <ph name="AUE_WARNING_PERIOD_PROPERTY_NAME">aue_warning_period</ph> are optional values specified in number of days. Default value for them is 0 days, which means that there is no warning period.
The <ph name="UNMANAGED_USER_RESTRICTED_PROPERTY_NAME">unmanaged_user_restricted</ph> is an optional property with default value as False.
device_only: true
example_value:
requirements:
- aue_warning_period: 14
chromeos_version: '12215'
warning_period: 0
- aue_warning_period: 21
chromeos_version: 13315.60.12
warning_period: 10
unmanaged_user_restricted: true
features:
dynamic_refresh: true
per_profile: false
owners:
- [email protected]
- [email protected]
- [email protected]
schema:
properties:
requirements:
items:
properties:
aue_warning_period:
description: Time in days after auto update expiration post which the
user will be signed out if <ph name="PRODUCT_OS_NAME">$2<ex>Google ChromeOS</ex></ph>
version is less than the specified <ph name="CHROMEOS_VERSION_PROPERTY_NAME">chromeos_version</ph>
minimum: 0
type: integer
chromeos_version:
description: Minimum allowed <ph name="PRODUCT_OS_NAME">$2<ex>Google ChromeOS</ex></ph>
version
type: string
warning_period:
description: Time in days after which the user will be signed out if <ph
name="PRODUCT_OS_NAME">$2<ex>Google ChromeOS</ex></ph> version is less
than the specified <ph name="CHROMEOS_VERSION_PROPERTY_NAME">chromeos_version</ph>
minimum: 0
type: integer
required:
- chromeos_version
type: object
type: array
unmanaged_user_restricted:
description: A boolean flag indicating whether unmanaged user sessions should
receive notifications and force log out if update is required as per this
policy.
type: boolean
type: object
supported_on:
- chrome_os:86-
tags: []
type: dict
generate_device_proto: False
Codebase Browser
chromium