### Update (November 4, 2026): Feature rollback Based on customer feedback, the enforcement of an all-or-nothing enterprise policy for the [`chrome.debugger` extension API](https://developer.chrome.com/docs/extensions/reference/api/debugger) can cause issues in certain environments. While we design a more flexible approach, we have decided to roll back this change. For details on how to apply the rollback, see our addendum to this [Chrome Developer blog post](https://developer.chrome.com/blog/debugger-enterprise-policy-restrictions#guidance_for_enterprise_administrators). ### Feature description (September 23, 2026) The [`chrome.debugger` extension API](https://developer.chrome.com/docs/extensions/reference/api/debugger) lets you send [Chrome DevTools Protocol](https://chromedevtools.github.io/devtools-protocol/) commands to a specified `target`, for example, a tab, an iframe, or a service worker. When connecting (attaching) to a target, the API can now enforce permissions on managed browsers by validating enterprise host and screenshot policies. On enterprise devices, some policies can restrict extensions from attaching the debugger using an all-or-nothing model at attach time (`chrome.debugger.attach()`): - For hosts, the [ExtensionSettings](https://chromeenterprise.google/policies/#ExtensionSettings) enterprise policy can be configured to block hosts for an extension, returning the error `Host access is restricted by policy`. - For screenshots, the [DisableScreenshots](https://chromeenterprise.google/policies/#DisableScreenshots) enterprise policy disables screenshot capture or Data Loss Prevention (DLP) rules apply, returning the error `Screenshot capture is restricted by policy`. Developers can handle attach rejections gracefully or use higher-level APIs like [`chrome.scripting`](https://developer.chrome.com/docs/extensions/reference/api/scripting) and [`chrome.declarativeNetRequest`](https://developer.chrome.com/docs/extensions/reference/api/declarativeNetRequest) that support granular origin permissions in restricted enterprise environments.