caption: Allow or deny device geolocation access
desc: |-
  Set the device-level geolocation access level for
  <ph name="PRODUCT_OS_NAME">$2<ex>Google ChromeOS</ex></ph> system, that is
  effective before a user signs in. After sign-in, users can control the
  geolocation access level via per-user setting.

  If not set or set to <ph name="ALLOW">Allow</ph>, the login screen geolocation
  access is allowed for the managed devices. If an invalid policy value is sent,
  the access falls back to
  <ph name="DISALLOW">Disallow</ph>. For unmanaged devices it's always
  <ph name="ALLOW">Allow</ph>.

  WARNING: Be careful when changing this setting, it could break other policies
  involving geolocation
  (e.g. <ph name="SYSTEM_TIMEZONE_AUTOMATIC_DETECTION_POLICY">SystemTimezoneAutomaticDetection</ph>)!
  In particular, if this policy is set to  <ph name="DISALLOW">Disallow</ph>,
  then the
  <ph name="POLICY_ENUM_SYSTEMTIMEZONEAUTOMATICDETECTION_TIMEZONEAUTOMATICDETECTIONSENDWIFIACCESSPOINTS">TimezoneAutomaticDetectionSendWiFiAccessPoints</ph>
  and
  <ph name="POLICY_ENUM_SYSTEMTIMEZONEAUTOMATICDETECTION_TIMEZONEAUTOMATICDETECTIONSENDALLLOCATIONINFO">TimezoneAutomaticDetectionSendAllLocationInfo</ph>
  options of the
  <ph name="SYSTEM_TIMEZONE_AUTOMATIC_DETECTION_POLICY">SystemTimezoneAutomaticDetection</ph>
  policy will malfunction and only use the <ph name="IP">IP</ph>-based location
  resolution on the <ph name="LOG_IN">Log-in</ph> screen.
device_only: true
features:
  internal_only: true
  dynamic_refresh: true
  per_profile: false
supported_on:
- chrome_os:114-
type: int-enum
schema:
  type: integer
  enum:
  - 0
  - 1
default: 1
default_for_managed_devices_doc_only: 1
example_value: 0
items:
- caption: Disallow geolocation access on log-in screen.
  name: Disallow
  value: 0
- caption: Allow geolocation access on log-in screen.
  name: Allow
  value: 1
owners:
- zauri@google.com
- chromeos-privacyhub@google.com
tags: []
generate_device_proto: False
