This article is written for G Suite for Education (GSFE) Admins. Note Safe Doc configuration is not supported for personal gmail accounts.

At out of the box, Safe Doc eliminates these kids-inappropriate features in GSFE,

  • the image searching feature
  • the video searching feature
  • the Explore feature
  • the Dictionary feature
  • the link preview feature
  • the middle finger emoji
  • games in google search, e.g. Snake
  • the Poop sticker in Hangouts

But every chef has their own taste. With that in mind, Safe Doc supports policy configurations to customize which G Suite features to block. To get a better understanding how policy works, take a look at Google's article Chrome Policy Management.

Policy Configuration Format

This article focuses on the Chrome profile based policy configuration via Google Admin Console. This policy management approach supports all managed Chrome browsers on Chrome OS / Windows / Mac / Linux.

In a nutshell, the policy configuration is a human-readable JSON file. The JSON includes a group of policies. A sample policy for Safe Doc is like

{
  "SafeDocLicenseKey": {
    "Value": "12345678-9012-3456-7890-1234567890"
  },
  "EnableExplore": {
    "Value": true
  },
  "EnableDictionary": {
    "Value": false
  },
  "EnableVideoSearch": {
    "Value": true
  },
  "EnableImageSearch": {
    "Value": false
  },
  "BlockAddVideo": {
    "Value": false
  },
  "BlockEmojis": {
    "Value": ["🖕"]
  },
  "BlockDocLinkPreview": {
    "Value": true
  },
  "BlockDriveSharedLinks": {
    "Value": {
      "Blacklist": [
        "1TTdYiQ_TgOlpNr-zyT8OpFLbwPmz0-g9XymYql5l1ZA",
        "*@*",
        "/*/*"
      ],
      "BlacklistExceptions": [
        "114xLJiJZ8OwXJ41sYyKdycT8Hy0ccbIgPVPG-n_6tew",
        "*@school.us"
      ],
      "DelegateAdminEmail": "d.admin@test.xfanatical.com"
    }
  },
  "BlockWebPublish": {
    "Value": true
  },
  "BlockGoogleSearchGames": {
    "Value": true
  }
}

Each policy comes with a format of "PolicyName": { "Value": <the value> }. The "Value" property is a must. Missing it would invalidate the entire configuration and students' Chrome browsers will reject your updates in Admin Console.

The policy value depends on its data type.

  • If it's a Boolean, the value is either true or false.
  • If it's a String, the value is a text like "this is a text".
  • If it's a Number, type a number.
  • If it's an Array (or List), then the value is like ["a", "b", "c"].
  • If it's an Object (or Group), then enclose policy elements with a pair of braces { property1: true, property2: false }. An Object is like a folder in your computer containing more files.

The definition of each policy can be found in Safe Doc Policy List below. Most Safe Doc policies are of Boolean type.

Be ware of typos. A redundant comma or missing curly bracket will break the policy configuration.

Edit Policy Configuration

First of all, We recommend you test your policy configuration in an isolated Organizational Unit (OU) to find a sweet spot of your blocking strategy. When you're ready, you can copy and paste the policy configuration to the production student OU(s).

To edit the policy configuration for an OU, follow these steps.

  1. Log into Admin Console.
  2. Go to Devices > Chrome management > Apps & extensions.
  3. Select the OU with Safe Doc installed.
  4. Click the Safe Doc app.
  5. In the Policy for extensions of right panel, edit your policy configuration JSON.
  6. If everything is correct, click Save to take effect. Then the Safe Doc extension in your test student accounts under this selected OU will be automatically receive the changes and block features as you configured.
Edit Safe Doc Policy in Admin Console
Edit Safe Doc Policies in Admin Console

Best Practices on Configuring Safe Doc Policies

  1. Only enable the policies you needed. If you don't need to block the features in G Suite for Education, it's recommended to explicitly turn off the policy. Enabling too many policies may impact your students' Google apps performance and experiences.
  2. Watch out for the default values when the policies are unset. For example, the EnableImageSearch with default value of false, that means the image searching feature is blocked if this policy does not appear in your policy configuration.
    Side note: we're designing the naming convention towards Block<GSFE-feature> with the default value of false to make configuration more consistent.

Safe Doc Policy List

SafeDocLicenseKey

DescriptionThe license key used to activate Safe Doc.

With a valid license key, the Safe Doc extension will display the icon in safe doc logo - green. Otherwise, it's displayed as safe doc logo - grey.

If not set or incorrect, the extension does not function.
Data typeString
Support sinceVersion 1.1.0

EnableExplore

DescriptionBlock the Explore feature in Docs and Slides.

The Explore feature can be activated from the floating widget on the bottom right of app, context menu or app menu.

If not set or false, the Explore feature is blocked.
Data typeBoolean
Defaultfalse
Support sinceVersion 1.1.0
Learn moreHow to Disable the Explore feature in Docs and Slides?

EnableDictionary

DescriptionBlock the Dictionary feature in Docs, Sheets, Slides, Forms and Drawing.

The Dictionary feature can be activated from right-click context menu or app menu.

If not set or false, the Dictionary feature is blocked.
Data typeBoolean
Defaultfalse
Support sinceVersion 1.1.0
Learn moreHow to Disable Dictionary in Google Docs?
DescriptionBlock the YouTube Video Search feature in Slides, Forms, Classroom and Sites.

The YouTube video search feature can be activated from app menu in Slides or side app bar in Forms or comment bar in Classroom.

If not set or false, this feature is blocked.
Data typeBoolean
Defaultfalse
Support sinceVersion 1.1.0
Learn moreHow to Block Video Search in Google Slides, Forms, Hangouts and Classroom?
DescriptionBlock the Google Image Search feature in Docs, Sheets, Slides, Forms, Drawings, Jamboard and Sites.

The Google Image Search feature can be activated from app menu Insert > Image > Search the web, toolbar, context menu or side app bar in Forms.

If not set or false, this feature is blocked.
Data typeBoolean
Defaultfalse
Support sinceVersion 1.1.0
Learn moreHow to Block Image Searching in Google Apps?

BlockAddVideo

DescriptionBlock the Adding Video feature in Slides, Forms and Classroom.

This is a more aggressive policy than EnableVideoSearch. It completely removes the Add video option from Slides, Forms and Classroom. The Slides Insert > Video will be removed. The video buttons in Forms and Classroom will removed.

If this policy is set to true, the Adding Video feature is blocked.
Data typeBoolean
Defaultfalse
Support sinceVersion 1.4.0

BlockEmojis

DescriptionBlock certain insulting emojis in Gmail, Hangouts and Docs

Gmail has a feature to allow students to select emoji symbols when composing an email. This policy allows you to configure which emoji symbol should be blocked.

The Emojis also exist in the Hangouts chat dialog and the special characters menu Insert > Special characters > Emojis in Docs, Slides and Drawing.

This policy is supplied with a list of strings.
If this policy is not set, the default array will be used, ["🖕"].
If this policy is empty [], no emojis are blocked.
If this policy includes an *, the emoji feature is disabled.
Data typeList of Strings
Default["🖕"]
Examples"BlockEmojis": {
  "Value": ["🖕", "💩", "🗡"]
}

Block the middle finger, pile of poo and dagger emojis.

"BlockEmojis": {
  "Value": ["*"]
}

Block the entire emoji feature.

"BlockEmojis": {
  "Value": []
}

No block.
Support sinceVersion 1.4.0
Learn moreRemove Inappropriate Emojis in Gmail, Hangouts and Docs

BlockDocLinkPreview

DescriptionBlock the link preview feature in Docs, Slides and Drawings. The link preview feature allows students to accidentally finding inappropriate images and contents on links.
Data typeBoolean
Defaulttrue
Support sinceVersion 1.5.0
Learn moreDisable Link Preview Feature in Docs, Slides and Drawings
DescriptionBlock certain Google drive shared links even students have access permissions
This policy is more powerful than Admin Console's Drive Sharing settings in terms of drive access management for students. It gives teachers and administrators finer control on which drive information students can see.

This policy is an Object, containing 5 child properties
►Blacklist
►BlacklistExceptions
►DelegateAdminEmail
►ServiceAccountEmail
►ServiceAccountPrivateKey

Safe Doc will determine whether to block a shared drive file by first matching the Blacklist and matching the BlacklistExceptions list. The DelegateAdminEmail setting is used when you need to block owners by organizational units. The ServiceAccountEmail and ServiceAccountPrivateKey are used to call Google APIs without students' manual authorization.

Note: this policy requires a Google service account.

You can see the full instructions of setting up this policy in Block Google Drive Sharing Files > Approach 2.
Data typeObject
Default{
  "Blacklist": [],
 "BlacklistExceptions": [],
 "DelegateAdminEmail": "",
 "ServiceAccountEmail", "",
 "ServiceAccountPrivateKey": ""
}
Examples"BlockDriveSharedLinks": {
  "Value": {
    "Blacklist": [
      "1TTdYiJ_TgOlpNr-zYT8OpELbwPmz0-g1XymYql5l1ZA", 
      "*@*",
      "/Students/Element School/Grade 4",
      "/Students/Element School/Grade 5",
      "/Staff/*"
    ],
    "BlacklistExceptions": [
      "*@your.district.k12.us",
      "*@brother.district.k12.us",
      "*@nonprofit.org",
      "the.science.guy@gmail.com",
      "/Staff/Teachers"
    ],
    "DelegateAdminEmail": "safe-doc@your.district.k12.us",
    "ServiceAccountEmail": "7a04e3d4373e5759f78e493ab296fb26ee93b...(truncated for demo purpose)",
    "ServiceAccountPrivateKey": "3251af946a10775edbb8080790b3c849d3b7...(truncated for demo purpose)"
  }
}

For a Grade 3 student, s/he is
► blocked to open the google doc with id 1TTdYiJ_TgOlpNr-zYT8OpELbwPmz0-g1XymYql5l1ZA
► only allowed to visit shared files from his/her school, whitelisted schools, trusted external organizations and personal @gmail accounts. Files owned by other emails are blocked.
►not allowed to see shared files from Grade 4 and Grand 5 students and staffs other than teachers, like administrators or technicians.
Support since Version 1.6.7
Learn moreBlock Google Drive Sharing Files > Approach 2
Service
Account Encryption Tool

Blacklist

This is a subsidiary property of BlockDriveSharedLinks policy.

DescriptionThe blacklist of Drive file sources. Safe Doc can block Drive shared files in 3 forms.
1) A specific Drive file ID. Safe Doc blocks specific Drive files if their file IDs are in this blacklist.
2) All shared Drive files from specific owners. Input an email or emails of file owners. Safe Doc detects the owner of file link and block it if the owner's email address falls into the blacklist. Support the * wildcard.
3) All shared Drive files from owners from specific organizational units (OU). Specify the Organizational Unit Path. The OU path is a different representation of OU separated by a forward-slash '/'. For example, /Students/Elementary School/Grade 1 equals to District Domain > Students > Elementary School > Grade 1. Safe Doc looks up the OU of file owner and blocks the file link if the OU is in the blacklist.
Data typeList of Strings
Default[]
Examples"Blacklist": [
  "1TTdYiJ_TgOlpNr-zYT8OpELbwPmz0-g1XymYql5l1ZA",   "1b4xLJiWZ8OwXJ45kYyOdycT8Hs0cabIgPVKG-n_6tew"
]

Block 2 drive files by their file IDs

"Blacklist": ["*@gmail.com"]
Block all shared files from @gmail.com accounts

"Blacklist": [
  "b.buckley@gmail.com",
  "p.melendez@example.org"
]

Block all shared files from 2 specific owners

"Blacklist": ["*@*"]
Block all shared files from anyone, including users in your domain. Combine this with the BlacklistExceptions option to achieve whitelisting specific owners.

"Blacklist": ["/Students/Grade 4", "/Students/Grade 5"]
Block shared file links from Grade 4 and Grade 5 students.

"Blacklist": ["/Staff", "/Staff/*"]
Block shared file links from any staff.

"Blacklist": ["*"]
Nah, using a single wildcard does not work.
Support since Version 1.6.7

BlacklistExceptions

This is a subsidiary property of BlockDriveSharedLinks policy.

DescriptionException Drive file links to the blacklist. Any file that matches the source in this list will be unblocked. Safe Doc accepts 2 forms of sources.
1) Specific owner emails. Support the * wildcard too.
2) Specific organizational units. Support the * wildcard too.
Data typeList of Strings
Default[]
Examples"BlacklistExceptions": [
  "*@your.district.k12.us",
  "*@brother.district.k12.us",
  "*@nonprofit.org",
  "the.science.guy@gmail.com"
]

Allow shared files from your school domain, whitelisted school domain, external non-profit organization and trusted @gmail accounts.

"BlacklistExceptions": ["/Staff/Teachers"]
Allow shared file links from any teachers.
Support since Version 1.6.7

DelegateAdminEmail

This is a subsidiary property of BlockDriveSharedLinks policy.

DescriptionA privilege-limited administrator email to allow Safe Doc access user and organizational unit basic information to perform drive file link filtering.

To know which OU a shared file owner is associated to, Safe Doc needs to impersonate an administrator to get user and OU information from your school domain using your service account. A separate administrator account with minimum user read-only and OU read-only privileges is ideal.
Data typeString
Default""
Examples"DelegateAdminEmail": "safe-doc@your.district.k12.us"
safe-doc@your.district.k12.us is an user account with limited admin privileges created specifically to read file owners' OU information.
Support since Version 1.6.7

ServiceAccountEmail

This is a subsidiary property of BlockDriveSharedLinks policy.

DescriptionThe email of service account you created in your Google Cloud Platform.

To protect the service account information, we strongly recommend to encrypt it using the Service Account Encryption Tool for Safe Doc tool in the BlockDriveSharedLinks policy and set the value with the encrypted text instead of the plain email address.
Data typeString
Default""
Examples"ServiceAccountEmail": "7a04e3d4373e5759f78e493ab296fb26ee93b...(truncated for demo purpose)"
Use an encrypted value of service account email for security.

"ServiceAccountEmail": "safe-doc@myschool.iam.gserviceaccount.com"
It's also acceptable to use the plain email address.
Support since Version 1.29.1

ServiceAccountPrivateKey

This is a subsidiary property of BlockDriveSharedLinks policy.

DescriptionThe private key of service account you created in your Google Cloud Platform.

To protect the service account information, please first encrypt it using the Service Account Encryption Tool for Safe Doc tool in the BlockDriveSharedLinks policy and set the value with the encrypted text instead of the plain private key.

You're responsible to protect your own service account private key.
Data typeString
Default""
Examples"ServiceAccountPrivateKey": "3251af946a10775edbb8080790b3c849d3b7...(truncated for demo purpose)"
Use an encrypted value of service account private key for security.

"ServiceAccountPrivateKey": "-----BEGIN PRIVATE KEY-----\n
MIIEvQIBADANBgkqhkiG9w0BAQEF...(truncated for demo purpose)"

It's also acceptable to use the plain private key, but it's not recommended.
Support since Version 1.29.1

BlockWebPublish

DescriptionBlock the publishing Docs / Sheets / Slides to the web feature, which allows students to share their documents publicly in the internet.

If the policy is set to true, Safe Doc will remove the menu item File > Publish to the web in Google Docs, Sheets, Slides and Drawings.

If this policy is unset or false, Safe Doc does nothing to the feature.
Data typeBoolean
Defaultfalse
Support since Version 1.6.7
Learn morePrevent Students from Publishing Google Docs to Web

BlockGoogleSearchGames

DescriptionBlocks mini games (Snake, Tic tac toe, Pac-Man etc.) in Google search results.

If this policy is unset, Safe Doc blocks the google search games. To unblock the games, explicitly set the policy value to false.
Data typeBoolean
Defaulttrue
Support sinceVersion 1.6.7
Learn moreBlock Google Search Games

BlockClassroomUnenroll

DescriptionPrevent students from unenrolling classes in Google Classroom

This feature is enabled if this option is true.
Data typeBoolean
Defaultfalse
Support sinceVersion 1.7.0
Learn morePrevent Students from Unenrolling in Classroom

BlockStickers

DescriptionBlock certain not-so-nice stickers in Hangouts

Provide the sticker name in this policy to remove those stickers from your students' Hangouts app and Gmail app. To find which value to be put in the policy, see this Sticker Names table.

This policy is supplied with a list of strings.
If this policy is not set, the default array will be used, ["Poop"].
If this policy is empty [], no stickers are blocked.
Data typeArray of strings
Default["Poop"]
Examples"BlockStickers": {
  "Value": ["Poop", "Cheers", "Callouts_Internet_LMAO"]
}

Block the Poop, Cheers and the LMAO stickers
Support sinceVersion 1.8.0
Learn moreBlock Stickers in Hangouts

BlockMeetCaptions

DescriptionBlock Live captions feature in Google Meet.

The live captions feature is blocked if this policy is set to true.
Data typeBoolean
Defaultfalse
Support sinceVersion 1.9.0
Learn moreBlock Live Captions in Google Meet

NewTabPageUrl

DescriptionConfigure the default New Tab page URL and prevent students from changing it.

The New Tab page is the page opened when new tabs are created (including the one opened in new windows).

If this policy is not set, the default new tab page is used.
Data typeString
Default""
Examples"NewTabPageUrl": {
  "Value": "https://classroom.google.com"
}

Redirect the new tab page to Google Classroom
Support sinceVersion 1.10.4
Learn moreChange Chrome New Tab URL

BlockMeetRecord

DescriptionDisable the meeting recording feature in Google Meet.

Prevent students from initiating meeting recording in Google Meet except the teacher.

The meeting recording is blocked if this policy is set to true.
Data typeBoolean
Defaultfalse
Support sinceVersion 1.11.0
Learn moreDisable Students Recording Meeting in Google Meet

BlockMeetPresent

DescriptionDisable the presenting screen feature in Google Meet.

Prevent students from sharing their screens to take over the teacher's presentation.

This policy is deprecated in favor of Google Meet's native Host Controls. See Adding present and chat Meet moderator capabilities for education users. However, the Host Control feature is on the session basis. If you prefer disabling the present feature in Google Meet permanently for all meetings, this policy is more convenient than the Host Control.

The presentation screen is blocked if this policy is set to true.
Data typeBoolean
Defaultfalse
Support sinceVersion 1.11.0
Learn moreDisable Students Sharing Screens in Google Meet

BlockMeetAddPeople

DescriptionRestrict students from adding people in Google Meet.

This policy disables the feature to add people into Google Meet. In a typical online learning scenario, only the teacher (host) can add people. Students are not allowed to invite people into the meeting.

The adding people feature in Meet is blocked if this policy is set to true.
Data typeBoolean
Defaultfalse
Support sinceVersion 1.12.0
Learn morePrevent Students From Adding People To Google Meet

BlockComment

DescriptionDisable the Comment feature in Docs Editors and Drive.

This policy disables the Comment feature in Google Docs, Sheets, Slides, Drawings as well as Drive. This could prevent students from chatting on it.

The Comment feature is blocked if this policy is set to true.
Data typeBoolean
Defaultfalse
Support sinceVersion 1.12.0
Learn moreDisable Comment In Google Docs Editors

BlockInFileChat

DescriptionDisable the Chat feature in Google Docs Editors.

This policy disables the Chat feature in Google Docs, Sheets, Slides and Drawings.

The Chat feature is blocked if this policy is set to true.
Data typeBoolean
Defaultfalse
Support sinceVersion 1.12.0
Learn moreDisable Chat In Docs, Sheets, Slides And Drawings

BlockMeetChat

DescriptionDisable the Chat feature in Google Meet.

This policy stops students from posting chat messages in Google Meet. But students can still view messages posted by the teacher.

This policy is deprecated in favor of Google Meet's native Host Controls. See Adding present and chat Meet moderator capabilities for education users. However, the Host Control feature is on the session basis. If you prefer disabling the chat in Google Meet permanently for all meetings, this policy is more convenient than the Host Control.

The Chat feature is blocked if this policy is set to true.
Data typeBoolean
Defaultfalse
Support sinceVersion 1.13.0
Learn moreDisable Chat In Google Meet

BlockSendFeedback

DescriptionPrevent students from sending feedback to Google in G Suite.

This policy disables the send feedback feature everywhere in G Suite. For example, in Docs menu Help > Help Docs improve, or in Gmail ? > Send feedback.

The blocking is ON if this policy is set to true.
Data typeBoolean
Defaultfalse
Support sinceVersion 1.14.1
Learn morePrevent Students From Sending Feedback In G Suite

BlockClassroomPeopleInfo

DescriptionThis policy removes the People tab in Google Classroom. The People tab displays all students' information that is a privacy concern for parents.

The blocking is ON if this policy is set to true.
Data typeBoolean
Defaultfalse
Support sinceVersion 1.14.1
Learn moreHide the People tab in Google Classroom

BlockAddImageByUrl

DescriptionThis policy disables the feature to insert a web image by URL in Docs, Sheets, Slides, Forms, Drawing, Gmail and Sites.

The blocking is ON if this policy is set to true.
Data typeBoolean
Defaultfalse
Support sinceVersion 1.14.1
Learn moreDisable Inserting Image By URL In Docs Editors

BlockEmailAsAttachment

DescriptionThis policy disables the feature to email files as attachments in Docs, Sheets, Slides, Forms and Drawing.

The emailing as attachment feature is under the menu File > Email > Email this file.

The blocking is ON if this policy is set to true.
Data typeBoolean
Defaultfalse
Support sinceVersion 1.14.1
Learn moreBlock Email as Attachment in Google Docs

BlockMeetJoinOrStartButton

DescriptionThis policy removes the New meeting and Join buttons in Google Meet home page. It makes students joining random meeting code harder.

Disable the Net meeting and join meeting code buttons in Google Meet home page

The blocking is ON if this policy is set to true.
Data typeBoolean
Defaultfalse
Support sinceVersion 1.14.4

ScheduleRefreshChromeTabs

DescriptionForce refreshing all Chrome tabs daily.

This policy forces students' all active Chrome tabs to reload at one or more set times daily.

The policy contains 2 mandatory attributes, Times and Timezone.

Attribute Times is a list of times in the format of hh:mm, 2 digits hour (0-23) and 2 digits minute (0-59). 09:00 or 17:30 is valid; 7:05 or 14:3 or 9:0 is not valid.

Attribute Timezone is the time zone name for time above. A list of timezone values can be found in List of tz database time zones, the TZ database name column of the table. For example, America/New_York or Europe/London or Australia/Sydney.

This Chrome tabs force reloading feature is ON if this policy's both attributes are set correctly.
Data typeObject
Default{
  "Times": [],
  "Timezone": ""
}
Examples"ScheduleRefreshChromeTabs": {
  "Value": {
    "Times": ["09:00", "11:00", "14:00", "16:00"],
    "Timezone": "America/New_York"
  }
}

Auto-refresh Chrome tabs at 9am, 11am, 2pm and 4pm (Eastern Time)
Support sinceVersion 1.14.6
Upgrade infoIf you upgrade from a version before 1.15.5, the Time attribute is deprecated. Please use Times attribute.

BlockGmailChat

DescriptionDisable the Hangouts Chat in Gmail

This policy disables the Hangouts Chat widget at the left panel of Gmail. It prevents students from chatting in Gmail.

The Hangouts Chat service is not changed.

The blocking is ON if this policy is set to true.
Data typeBoolean
Defaultfalse
Support sinceVersion 1.15.0
Learn moreBlock Hangouts Chat in Gmail

BlockEditorTemplates

DescriptionRemove docs editor templates from Google Drive

This policy removes some or all docs editor templates from the Template gallery provided by Google.

To disable all templates provided by Google, specify a value of ["*"] as the example below.

To disable some templates provided by Google, supply the policy with a list of key phrases. A template is removed when the title contains all words in a key phrase. The key phrases are case-insensitive.

The blocking is ON if this policy has values.
Data typeList of Strings
Default[]
Examples"BlockEditorTemplates": {
  "Value": ["*"]
}

Removes all templates in General tab.

"BlockEditorTemplates": {
  "Value": ["essay", "project timeline", "professional profile"]
}

Removes both Google Doc template Essay Playful and Essay Paperback. Removes the Google Sheet template Project timeline. Removes the Google Slides template Professional profile.
Support sinceVersion 1.16.0
Learn moreRemove Default Templates in Google Docs

BlockDriveShare

DescriptionRemove Share feature in Drive

This policy removes completely the Share feature in Google Drive. It prevents students from sharing documents with other students and teachers too.

The blocking is ON if this policy is set to true.
Data typeBoolean
Defaultfalse
Support sinceVersion 1.17.0
Learn moreBlock Google Drive Sharing Files
Similar policyBlockDriveSharedLinks

EnableMeetMuteAll

DescriptionMute all participants in Google Meet

This policy added a magic chat command in Google Meet, /muteall. This command allows teachers to mute all students at once while presenting the lecture, by opening and chat side panel and input /muteall.

This feature is ON by default.
Data typeBoolean
Defaulttrue
Support sinceVersion 1.18.0
Learn moreMute All Students in Google Meet

BlockSendForms

DescriptionRemove the Send button in Google Forms

This policy removes the Send button in Google Forms

This feature is OFF by default.
Data typeBoolean
Defaultfalse
Support sinceVersion 1.19.0
Learn moreStop Students Sending Google Forms

BlockSheetFunctions

DescriptionRemove certain functions in Google Sheets

This policy removes certain Google Sheet functions from the list which may download harmful online content from web. The removed functions are not displayed in the menus. That said, the removed functions still work in a formula per se.

This policy accepts a list of function names, case-insensitive. Functions in the list are removed.

This feature is OFF by default.
Data typeList of Strings
Default[]
Examples"BlockSheetFunctions": {
  "Value": ["IMPORTDATA", "IMPORTHTML", "IMAGE"]
}

Removes 3 functions, IMPORTDATA, IMPORTHTML and IMAGE, all of which download data from the internet.
Support sinceVersion 1.19.0
Learn moreRemove Inappropriate Functions in Google Sheets

BlockDriveGridView

DescriptionRemove the Grid View and file previews in Google Drive

This policy is intended to block file preview thumbnails in Google Drive as bad file preview thumbnails are visible enough to disturb students.

This policy has 3 functions,
1. Enforce List view. Google Drive will be always in List view.
2. Grid View button removed.
Grid view button in Google Drive
3. Remove those large preview thumbnails. A typical place is the My Drive > Quick Access.
Remove thumbnails in Google Drive

This feature is OFF by default.
Data typeBoolean
Defaultfalse
Support sinceVersion 1.19.5

EnableMeetChatOffCommand

DescriptionEnable the /chatoff command in Google Meet

When this policy is enabled, in Google Meet, teachers will be able to use the /chatoff command in the chat window to disable the chat feature for specific student.

The /chatoff command is used in the following syntax.
/chatoff <student email address>

Examples:
/chatoff tim.thomposon@example.org
/chatoff angeline.hudgens@example.org


The given student's chat feature is disabled temporarily for the Google Meet session. The chat feature is restored in their next Google Meet session.

This feature is OFF by default.
Data typeBoolean
Defaultfalse
Support sinceVersion 1.20.6
Learn moreDisable Chat in Google Meet

OptOutAnonymousErrorReporting

DescriptionOpt out anonymous Safe Doc error reporting

To help us troubleshoot Safe Doc issues, Safe Doc automatically collects anonymous crash information. The error reporting excludes any personal identifiable information (PII) abiding by privacy laws like COPPA. See xFanatical Privacy Page for more information.

Anonymous error reporting is ON by default. To opt out, set this policy to true.
Data typeBoolean
Defaultfalse
Support sinceVersion 1.20.6

BlockMeetPhoneInfo

DescriptionDisable joining by phone in Google Meet

Google Meet includes an option to allow students join by phone for the audio. This feature is misused for inviting external unauthorized participants.

This policy removes the phone information in Google Meet and disallow students to initiate a phone call from Google Meet.

Set this policy to true to enforce the blocking.

This feature is OFF by default.
Data typeBoolean
Defaultfalse
Support sinceVersion 1.22.0
Learn moreDisable Joining by Phone in Google Meet

BlockDocsSpellCheck

DescriptionDisable the Spell Check feature in Docs editors

Google Docs, Sheets, Slides and Drawings all have a spell checking and automatic correction feature. Schools wanted to turn this feature off to force students learn vocabularies on their own.

This policy disables the spelling checking suggestions in the Docs editors. Students cannot enable them by themselves.

This policy may not be immediate effective because it disables the spell checks and grammar checks at the background when the student is in idle on Docs. Please expect 1-2 days to see the results on your students.

Set this policy to true to disable the spell check and grammar check. This feature is OFF by default. Note: setting this policy to false won't automatically enable spell checking. Students need to turn them on individually.
Data typeBoolean
Defaultfalse
Support sinceVersion 1.22.0
Learn moreDisable Spell Check in Google Docs

BlockMeetStudentInfo

DescriptionHide student names in Google Meet

Student full names in Google Meet are visible to the entire room. This causes privacy concerns for some parents and teachers. This policy removes all student names so students' identities are better protected.

Set this policy to true to hide the names.

This feature is OFF by default.
Data typeBoolean
Defaultfalse
Support sinceVersion 1.23.1
Learn moreHide Participants in Google Meet

BlockMeetChangeBackground

DescriptionDisable changing virtual background in Google Meet

Students are distracted by the updated feature of custom background in Google Meet.

This policy is set to block students changing the virtual background. It removes the buttons and menus to change background.

Set this policy to true to block the change background feature.

This feature is OFF by default.
Data typeBoolean
Defaultfalse
Support sinceVersion 1.24.2
DeprecatedGoogle officially supports the admin control of disabling background in Meet in Jan 27, 2021.
Learn moreDisable Changing Background in Google Meet

BlockEmailCollaborators

DescriptionDisable the emailing collaborators feature in Docs editors

In Docs / Sheets / Slides / Drawings, students can email each other using the File > Email > Email collaborators menu, which opens an interface to configure the messages to be sent.

This policy blocks the Email collaborators feature. Set this policy to true to enforce the blocking.

This feature is OFF by default (the policy is unset).
Data typeBoolean
Defaultfalse
Support sinceVersion 1.25.0
Learn moreDisable Emailing Collaborators in Docs Editors

BlockClassroomUnsubmitAssignment

DescriptionDisable students unsubmitting assignment works in Google Classroom.

In Google Classroom, students are able to unsubmit an assignment after turning in the initial assignment work. This policy disables the Unsubmit button so that students are no longer allowed to make changes.

Set this policy to true to disable the Unsubmit button. This feature is OFF by default (the policy is unset).
Data typeBoolean
Defaultfalse
Support sinceVersion 1.26.0
Learn moreDisable Students Unsubmitting & Resubmitting Assignment in Google Classroom

BlockClassroomResubmitAssignment

DescriptionDisable students resubmitting assignment works in Google Classroom.

In Google Classroom, students are able to resubmit assignment after the teacher graded the their work. This creates classroom chaos for the teacher. This policy disables the Resubmit button and disallow student to add or delete assignment work.

Set this policy to true to enforce the blocking policy. This feature is OFF by default (the policy is unset).
Data typeBoolean
Defaultfalse
Support sinceVersion 1.26.4
Learn moreDisable Students Unsubmitting & Resubmitting Assignment in Google Classroom

BlockUnnicknamedMeeting

DescriptionBlock students re-joining old unsupervised meeting links in Google Meet

When a Google Meet is created without a nickname, the meeting won't expire and may last for 90 days. Students found these old but still accessible meetings and chat without moderation.

This policy blocks students from joining these old unmanaged meetings without a nickname and with Host Controls > Quick Access = ON. Meetings with a nickname or requiring host permissions to join are not blocked.

The policy asks students to wait for 5 seconds before it decides to block or not block the meeting. In rare cases, the 5 seconds waiting is not long enough for slow loading pages so that the meeting may be falsely block. If you have seen nicknamed meetings falsely blocked by Safe Doc often, please extend the wait time in the BlockUnnicknamedMeetingWaitTime policy.

Set this policy to true to enforce the blocking policy. This feature is OFF by default (the policy is unset).
Data typeBoolean
Defaultfalse
Support sinceVersion 1.27.2
Learn moreBlock Students Joining Old Unsupervised Google Meetings

BlockUnnicknamedMeetingWaitTime

DescriptionThis policy configures the BlockUnnicknamedMeeting policy to wait for a given amount of time before the policy BlockUnnicknamedMeeting decides to block or not block a meeting. It does not block any G Suite features per se.

Why use this policy? Because the default 5 seconds wait time may not be enough to students' Chrome browsers to load a meeting (slow devices or network), so that the policy BlockUnnicknamedMeeting may make a wrong decision. If this is the case, experiment to extend the wait time up to 15 seconds.

The unit of wait time is seconds. Do not put the unit into the value.

If this policy is not configured, the wait time is by default 5 seconds.
Data typeNumber
Valid data[5, 15]
The value should be between 5 and 15, both inclusive. Any other numbers out of this range are ignored.
Default5
Examples"BlockUnnicknamedMeetingWaitTime": {
  "Value": 8
}
Support sinceVersion 1.27.5
Learn moreBlock Students Joining Old Unsupervised Google Meetings

BlockDocVoiceTyping

DescriptionBlock the voice typing feature in Google Docs and Slides

The voice typing feature can be found in the Tools > voice typing menu in Google Docs and Tools > voice type speaker notes in Google Slides.

This policy removes the voice typing feature so that students are forced to type on their own to learn word spelling.

Set this policy to true to enforce the blocking policy. This feature is OFF by default (the policy is unset).
Data typeBoolean
Defaultfalse
Support sinceVersion 1.28.1
Learn moreDisable Voice Typing in Google Docs

BlockTranslateDoc

DescriptionBlock the Translate Document feature in Google Docs

Google Docs has a feature in Tools > Translate document to translate a document to a different language. This may be exploited by students for cheating in foreign language exams.

This policy removes the Translate document feature in Google Docs. Set this policy to true to enforce the blocking policy. This feature is OFF by default (the policy is unset).
Data typeBoolean
Defaultfalse
Support sinceVersion 1.28.1
Learn moreDisable Translating Document in Google Docs

LimitBrowserTabs

DescriptionLimit the number of Chrome tabs students are allowed to open

That students open too many browser tabs may dramatically slow down and destabilize the school managed devices. Some apps or extensions may crash due to out of memory.

This policy prevents students from opening too many browser tabs to improve the overall device performance. This policy only supports Chrome browser.

This policy's value is an Object. The Object has 2 properties, MaxTabs and TabCloseStrategy.
  â€£ MaxTabs is the maximum number of Chrome tabs allowed to open. The number should be non-negative. The special number 0 means unlimited.
  â€£ TabCloseStrategy is a setting to close which tab when the maximum number of Chrome tabs is reached. The value is one of these numbers, 1, 2, 3 and 4. The meaning of these numbers are explained below.
    1 - The oldest accessed tab is closed. Recommended.
    2 - The oldest created tab is closed
    3 - The least accessed tab is closed
    4 - The new tab is immediately closed. All existing tabs remain open.

This policy is enabled when the value of MaxTabs property is not 0. To disable this policy, set the MaxTabs value to 0.
Data typeObject
Default{
  "MaxTabs": 0,
  "TabCloseStrategy": 1
}
Examples"LimitBrowserTabs": {
  "Value": {
    "MaxTabs": 8,
    "TabCloseStrategy": 1
  }
}

A student is allowed to open at max 8 Chrome tabs. If the student tries to open a new tab (9th tab), the oldest accessed tab will be closed and the 9th tab will be open.

"LimitBrowserTabs": {
  "Value": {
    "MaxTabs": 5,
    "TabCloseStrategy": 4
  }
}

A student is allowed to open at max 5 Chrome tabs. If the student tries to open a new tab (6th tab), the 6th tab will be immediately closed.

"LimitBrowserTabs": {
  "Value": {
    "MaxTabs": 0,
    "TabCloseStrategy": 2
  }
}

Students are allowed to open as many Chrome tabs as the browser can.
Support sinceVersion 1.29.0
Learn morePrevent Students from Opening Too Many Chrome Tabs

Takeaway

Configuration is an important characteristic of software. Luckily Google provided this option to remote configure the behavior of Safe Doc. If you encountered issues with the configurations, please leave a comment, email us at support@xfanatical.com or ask on Safe Doc community.