Chrome Web Store Allow/Block mode?

[Tynan Mulroy]

I'm looking to audit all OUs where the Chrome Webstore is not set to "Block all apps, admin manages allowlist". I'm struggling to find documentation on how I can print this particular OU setting using chromepolicies.

I even set up a test OU and configured this particular setting locally. Then I ran gam print chromepolicies ou [test_OU] to dump out all policies for the OU, and filtered by direct to find the direct policies set on the OU. Nothing shows!

Interestingly, I found the following in the chromeschema which seems to be as close as anything:

  Chrome Policy Schema: customers/[customerID]/policySchemas/chrome.users.appsconfig.AllowedInstallSources (800/1103)
    categoryTitle: Additional app policy
    definition:
      enumType:
        name: ChromeWebStoreInstallSources
          value:
            name: CHROME_WEB_STORE_ALLOW_ALL_APPS
              number: 1
            name: CHROME_WEB_STORE_BLOCK_ALL_APPS
              number: 2
            name: CHROME_WEB_STORE_BLOCK_ALL_APPS_USER_EXTENSION_REQUESTS_ALLOWED
              number: 3

However, when I try to print chrome.users.appsconfig.AllowedInstallSources, I'm getting 0 policies which match my query.

gam print chromepolicies ou / filter chrome.users.appsconfig.AllowedInstallSources
Getting all Chrome Policies that match query (chrome.users.appsconfig.AllowedInstallSources) for /
Got 0 Chrome Policies that matched query (chrome.users.appsconfig.AllowedInstallSources) for /...
name,orgUnitPath,parentOrgUnitPath,direct

Anybody see what am I missing here?

Thanks!