In this guide · 7 sections
Short answer
In Chrome, Gemini needs both the Gemini app setting and the GeminiSettings policy; turn either off to block it, and keep auto browse off with GeminiActOnWebSettings. In Edge, use EdgeEntraCopilotPageContext to stop Copilot reading pages and Microsoft365CopilotChatIconEnabled to hide it.
What changed: assistants that can read the page
Google's Asia Pacific announcement dated 20 April 2026 says Gemini in Chrome is rolling out to desktop and iOS users in markets including Singapore. Google's admin article on Gemini in Chrome says it can use the context of the currently viewed web page, with user permission, to give relevant answers, and that it isn't available in Incognito mode.
Microsoft's Copilot Chat in Edge page says Copilot Chat is available in the Edge sidebar and that users signed in with a Microsoft Entra work account receive enterprise data protection. Microsoft has also renamed Microsoft 365 Copilot Chat to Microsoft Copilot Chat, so you will see both names in admin screens.
Gemini in Chrome: the admin controls
Google says Gemini in Chrome is controlled by two switches, and access needs both to be enabled: the Gemini app setting in the Google Admin console, and Chrome's GeminiSettings policy.
| Control | Where | What it does |
|---|---|---|
| Gemini app setting | Google Admin console > Generative AI | Whether users can use Gemini at all with their work account |
| GeminiSettings | Chrome policy (Admin console > Gemini integrations, or GPO/Intune) | 0 = allow Gemini integrations in Chrome; 1 = don't allow |
| GenAiDefaultSettings | Admin console only | Default for Chrome's generative AI features; setting it to 'Do not allow' makes GeminiSettings default to off |
| GeminiActOnWebSettings | Chrome policy | Whether Gemini may take actions on web pages (auto browse) |
| GeminiActOnWebAllowedForURLs / BlockedForURLs | Chrome policy | Sites where auto browse is allowed or blocked |
Google's article says settings usually take effect within minutes but can take up to 24 hours. Users without a qualifying Workspace edition only get Gemini in Chrome if an admin grants them Gemini access under consumer terms, which have different data handling, so check which terms apply before enabling it for everyone.
Decide the default for the company
Most small firms either allow it with a staff rule, or block it until the rule is written.
Set the Gemini integrations policy
In the Admin console, go to Chrome browser settings, scroll to Generative AI, open Gemini integrations, choose the value and save. Use an organisational unit to pilot with a few users.
Keep auto browse off unless needed
Google says auto browse is off by default for managed users and is enabled with GeminiActOnWebSettings. If you allow it, restrict it to safe sites with the allow and block URL lists.
Check on a staff PC
Open chrome://policy and filter for Gemini to confirm the policy value applied.
Chrome auto browse: an agent with your login
Auto browse lets Gemini work across tabs to complete multi-step tasks, and Google says that with the user's permission it can use Google Password Manager to sign in to sites. That makes it an agent acting with the staff member's identity.
Google says auto browse can be enabled for managed users on certain editions (including Business Standard and Business Plus) through GeminiActOnWebSettings, and a separate GeminiSparkSettings policy controls whether the Gemini Spark agent can invoke it. For most small businesses, the safe default is off, or on only for a short list of low-risk sites. Our guide to AI browser agents and security covers prompt injection and why agents shouldn't have access to banking or admin consoles.
Copilot in Edge: the admin controls
Microsoft documents these Edge policies. Both apply to Entra ID (work) profiles, not personal Microsoft accounts.
| Policy | What it controls | If not configured |
|---|---|---|
| EdgeEntraCopilotPageContext | Whether Copilot in the sidebar can access page content, browsing history and video transcripts | On by default outside the EU; users can toggle it in Edge settings |
| Microsoft365CopilotChatIconEnabled | Whether the Copilot Chat icon shows in the Edge for Business toolbar | Shown; users can hide it with the Show Copilot toggle |
Microsoft's EdgeEntraCopilotPageContext page also says Copilot can't access page content on pages protected by data loss prevention (DLP) policies, even when the policy is enabled. The toolbar icon policy needs Edge 139 or later. Both can be set through Intune or Group Policy (MSEdge.admx).
Microsoft's enterprise data protection page says prompts and responses in Copilot Chat for work accounts aren't used to train foundation models. That covers the work profile; a personal Microsoft account in Edge doesn't get those protections, which is another reason to keep work in the work profile. Our guide to DLP for AI tools with Microsoft Purview explains how DLP fits in.
A one-page staff rule for browser AI
Policies decide what is possible; a short rule decides what is acceptable. Keep it to one page and put it in your onboarding pack.
Browser AI rule for staff
Do it yourself or get help?
If your PCs are already managed through Google Admin, Intune or Group Policy, setting these policies takes under an hour, plus time to agree the staff rule. If browsers aren't managed at all, policies won't reach them, and that is the first thing to fix. Our guide on malicious browser extensions covers the other browser settings worth managing at the same time.
Our Device Encryption & Management (S$490) sets up Microsoft Intune or Google endpoint management for up to 10 devices, with encryption, update rules and a device policy staff can sign, which is how browser policies reach every PC. The Microsoft 365 / Google Security Lockdown (S$590) enforces MFA, blocks risky apps and legacy sign-in, and tidies admin roles in your tenant.
Frequently asked questions
Google says Gemini in Chrome needs both the Gemini app setting in the Google Admin console and Chrome's GeminiSettings policy to be enabled. Turning either off blocks it. In the Admin console, go to Chrome browser settings, find Generative AI, open Gemini integrations and choose 'Do not allow'. For unmanaged browsers, set the policy through Group Policy or Intune.
By default, outside the EU, yes, when users ask it a contextual question in the sidebar. Microsoft's EdgeEntraCopilotPageContext policy controls whether Copilot can access page content, browsing history and video transcripts for work profiles. Disabling it blocks that access. Microsoft also says Copilot can't read pages protected by DLP policies.
Auto browse lets Gemini complete multi-step tasks in Chrome tabs and, with permission, sign in to sites using Google Password Manager. Google says it is off by default for managed users and controlled by the GeminiActOnWebSettings policy, with allow and block URL lists. For most small businesses, keep it off or limit it to low-risk sites.
Microsoft's enterprise data protection page says prompts and responses in Copilot Chat for users signed in with a work (Entra) account aren't used to train foundation models. Personal Microsoft accounts don't get enterprise data protection, so staff should use Copilot in their work profile, and you can enforce that with Edge profile policies.
Yes. Google announced on 20 April 2026 that Gemini in Chrome was rolling out to desktop and iOS users in Asia Pacific markets including Singapore. Google's admin documentation says it requires users aged 18 or over, signed in to the latest Chrome, and it isn't available in Incognito mode.