enterprise.deviceAttributes

This is for extensions that are part of a corporate device management strategy.

Examples:

• An asset management extension that reports device information back to a central server.
• An extension that customizes its behavior based on the device's assigned location or role.
• A support tool that retrieves the device's serial number to help a helpdesk agent.

{
  "name": "My Enterprise Device Reporter",
  "version": "1.0",
  "manifest_version": 3,
  "permissions": [
    "enterprise.deviceAttributes"
  ]
}

Why is it not risky for you?

This is a special permission that only works on computers managed by a company or school IT department. It is designed for corporate environments and will have no effect on your personal computer.

If you see an extension asking for this permission for your personal use, it's likely a mistake or a poorly designed extension, but it does not pose a direct security threat to you because the permission will not function outside of a managed enterprise setting. On a work computer, this permission is used by your IT department to manage device and network settings for administrative and security purposes.

This example reads the device's asset ID and annotated location.

// background.js or popup.js

async function getDeviceAttributes() {
  if (!chrome.enterprise || !chrome.enterprise.deviceAttributes) {
    console.log('This API is only available on managed ChromeOS devices.');
    return;
  }
  try {
    // Primary stable identifier provisioned by the admin console.
    const directoryId = await chrome.enterprise.deviceAttributes.getDirectoryDeviceId();
    console.log('Directory Device ID:', directoryId);

    const serial = await chrome.enterprise.deviceAttributes.getDeviceSerialNumber();
    console.log('Serial Number:', serial);

    const assetId = await chrome.enterprise.deviceAttributes.getDeviceAssetId();
    console.log('Asset ID:', assetId);

    const location = await chrome.enterprise.deviceAttributes.getDeviceAnnotatedLocation();
    console.log('Annotated Location:', location);

    const hostname = await chrome.enterprise.deviceAttributes.getDeviceHostname();
    console.log('Hostname:', hostname);
  } catch (error) {
    console.error('Error retrieving device attributes:', error);
  }
}

getDeviceAttributes();