Managed Mode ensures that only the users who belong to your organization’s Grammarly Business subscription can sign in to Grammarly’s product offerings. When this setting is activated, company employees won’t be able to use their personal Grammarly accounts at work.
Managed Mode will also deactivate the clients and stop sending text to our servers if:
- The user is not logged in
- The user is logged in but is not part of the relevant organization
Note: Users will still be able to log in with personal accounts through our sign-in page; however, they won’t be able to use the clients.
Activating Managed Mode
Prerequisite: SSO needs to be activated for your organization, and you will also need a Grammarly Enrollment Token. To obtain a Grammarly Enrollment Token, please go to the Managed Mode page in your account, or contact your Customer Success Manager. Alternatively, please contact the Grammarly Support team.
The following key and string value need to be configured in the registry:
[HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Grammarly\DesktopIntegrations]
"GrammarlyEnrollmentToken"="{UUID}"
where {UUID} is your Grammarly Enrollment Token with value type “REG_SZ”.
This change will switch Grammarly for Windows to Managed Mode; the Grammarly for Windows floating button will become gray, and the mode will prevent Grammarly for Windows from checking text until users sign in with the accounts provided by the organization.
If using JAMF or a similar tool, you can deploy a custom configuration profile (see instructions) with the following Preference domain: com.grammarly.ProjectLlama
The configuration profile template:
<?xml version="1.0" encoding="UTF-8"?>
<!DOCTYPE plist PUBLIC "-//Apple//DTD PLIST 1.0//EN" "http://www.apple.com/DTDs/PropertyList-1.0.dtd">
<plist version="1.0">
<dict>
<key>GrammarlyEnrollmentToken</key>
<string>{UUID}</string>
</dict>
</plist>
where {UUID} is your Grammarly Enrollment Token.
This change will switch Grammarly for Mac to Managed Mode; the Grammarly for Mac floating button will become gray, and the mode will prevent Grammarly for Mac from checking text until users sign in with the accounts provided by the organization.
The following key needs to be configured in the Windows Registry:
[HKEY_LOCAL_MACHINE\Software\Policies\Google\Chrome\3rdparty\extensions\kbfnbcaeplbcioakkpcpgfkobkghlhen\policy]
The string value should include the following value:
"GrammarlyEnrollmentToken"="{UUID}"
Note: kbfnbcaeplbcioakkpcpgfkobkghlhen is the ID of the official Grammarly for Chrome extension, and {UUID} should be replaced with your Grammarly Enrollment Token with value type “REG_SZ”.
Grammarly for Chrome will switch to Managed Mode when it discovers a valid enrollment token and obtains the settings for your organization from our servers.
Once this is configured, here is what will change:
- Instead of a regular “Sign in” button, it will show a “Sign in with SSO” button that leads directly to the IdP URL.
- After login, it will display the “Managed by {Your company name}” stripe in the bottom of the extension’s pop-up dialog (the one that you see when clicking the G icon in Chrome’s extensions bar). Hovering over the company name would also display the enrollment token that it read from the settings.
Note: Make sure to restart the Chrome browser after modifying the registry for this change to take effect. For Windows 11, you will need to reboot or reload policies by accessing chrome://policy/ in Chrome.
This can be done by creating a .plist file in the /Library/Managed Preferences/{username} folder.
File name:
com.google.Chrome.extensions.kbfnbcaeplbcioakkpcpgfkobkghlhen.plist
File contents:
<?xml version="1.0" encoding="UTF-8"?>
<!DOCTYPE plist PUBLIC "-//Apple//DTD PLIST 1.0//EN" "http://www.apple.com/DTDs/PropertyList-1.0.dtd">
<plist version="1.0">
<dict>
<key>GrammarlyEnrollmentToken</key>
<string>{UUID}</string>
</dict>
</plist>
Note: Make sure to replace {UUID} with your Grammarly Enrollment Token.
Finally, convert the XML file to binary using the following terminal command:
plutil -convert binary1 {filename} com.google.Chrome.extensions.kbfnbcaeplbcioakkpcpgfkobkghlhen
If using JAMF or a similar tool, you can deploy a custom configuration profile (see instructions) with the following Preference domain:
com.google.Chrome.extensions.kbfnbcaeplbcioakkpcpgfkobkghlhen
You can then upload a .plist file with the file contents shown above. The file should be in XML format.
In the Chrome Admin panel, go to Apps & Extensions.
Navigate to the Users & browsers tab and click on Grammarly to open additional settings.
Find Policy for extensions and paste the following text, where {UUID} is your Grammarly Enrollment Token:
{
"GrammarlyEnrollmentToken":
{
"Value": "{UUID}"
}
}
Then, save the changes.
Note: Your UUID can be found on your Managed Mode page when you unfold the Show configuration details section.
The following key needs to be configured in the Windows Registry:
[HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Edge\3rdparty\extensions\cnlefmmeadmemmdciolhbnfeacpdfbkd\policy]
The string value should include the following value:
"GrammarlyEnrollmentToken"="{UUID}"
Note: cnlefmmeadmemmdciolhbnfeacpdfbkd is the ID of the official Grammarly for Edge extension, and {UUID} should be replaced with your Grammarly Enrollment Token with value type “REG_SZ”.
Grammarly for Edge will switch to Managed Mode when it discovers a valid enrollment token and obtains the settings for your organization from our servers.
Note: Make sure to restart the Edge browser after modifying the registry for this change to take effect.
This can be done by creating a .plist file in the /Library/Managed Preferences/{username} folder.
File name:
com.microsoft.Edge.extensions.cnlefmmeadmemmdciolhbnfeacpdfbkd.plist
File contents:
<?xml version="1.0" encoding="UTF-8"?>
<!DOCTYPE plist PUBLIC "-//Apple//DTD PLIST 1.0//EN" "http://www.apple.com/DTDs/PropertyList-1.0.dtd">
<plist version="1.0">
<dict>
<key>GrammarlyEnrollmentToken</key>
<string>{UUID}</string>
</dict>
</plist>
Note: Make sure to replace the {UUID} with your Grammarly Enrollment Token.
The last step is to deploy your .plist file to your users’ Mac devices using your preferred MDM provider, such as Microsoft Intune. For instructions, see Deploy your plist.
For Jamf, upload the .plist file as a Custom Settings payload.
This can be done by creating a JSON file following the Firefox Managed storage manifests instructions.
- Under the data section, add “GrammarlyEnrollmentToken”=“{UUID}”, where {UUID} is your Grammarly Enrollment Token.
- Under the name section, add the Firefox extension ID: 87677a2c52b84ad3a151a4a72f5bd3c4@jetpack
File content example:
{
"name": "87677a2c52b84ad3a151a4a72f5bd3c4@jetpack",
"description": "ignored",
"type": "storage",
"data":
{
"GrammarlyEnrollmentToken": "{UUID}"
}
}
Save and put this file in any location on the computer.
Create a registry key with the following name:
[HKEY_CURRENT_USER\SOFTWARE\Mozilla\ManagedStorage\{name}]
where {name} equals the name value from the file. The key should have a single default value, which is the path to the file.
Note: Make sure to restart the Firefox browser after modifying the registry for this change to take effect.
This can be done by creating a JSON file following the Firefox Managed storage manifests instructions.
- Under the data section, add the “GrammarlyEnrollmentToken”=“{UUID}”, where {UUID} is your Grammarly Enrollment Token
- Under the name section, add the Firefox extension ID: 87677a2c52b84ad3a151a4a72f5bd3c4@jetpack
File content example:
{
"name": "87677a2c52b84ad3a151a4a72f5bd3c4@jetpack",
"description": "ignored",
"type": "storage",
"data":
{
"GrammarlyEnrollmentToken": "{UUID}"
}
}
For global visibility, save and put this file in:
/Library/Application Support/Mozilla/ManagedStorage/<name>.json
For per-user visibility, save and put this file in:
~/Library/Application Support/Mozilla/ManagedStorage/<name>.json
Note: Make sure to restart the Firefox browser after modifying the registry for this change to take effect.
Managed mode on iOS is configured similarly to Grammarly for Mac, where Apple Configuration Profiles are used to manage iOS devices. Typically, IT team deploys configuration profiles to organization’s devices using centralized endpoint management software, such as Jamf.
Property List:
<dict>
<key>GrammarlyEnrollmentToken</key>
<string>{UUID}</string>
</dict>
Jamf configuration:
- Add the Grammarly — Keyboard & Editor app to the Mobile Device Apps list.
- Configure Distribution Method, Scope, and other settings according to your organization’s preferences.
- Under the App Configuration tab, add PLIST and replace {UUID} with the UUID defined when enabling SSO for your organization.
- Push the App Configuration to your organization’s devices, which will switch the Grammarly Keyboard & Editor app to Managed Mode.
Once Manage Mode is activated, users will be shown a screen prompting them to re-login with their organizational accounts. The Grammarly Keyboard & Editor app will allow sign-ins only using SSO.
The following key and string value need to be configured in the registry:
[HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Grammarly\OfficeAddin]
“GrammarlyEnrollmentToken”=“{UUID}”
where {UUID} is your Grammarly Enrollment Token with value type “REG_SZ”.
Grammarly for Microsoft Office will switch to Managed Mode when it discovers a valid enrollment token and obtains the settings for your organization from our servers. You can confirm this by clicking on the “About” option as seen below for Outlook.
Note: Users will need to restart Microsoft Outlook and Word after modifying the registry for this change to take effect.