You can choose to create either Chromebook profiles for the device or the user. As the name suggests, device profiles ensure the restrictions and policies are applied to the entire device while the user profiles ensure the restrictions and policies are applied only to the user and not to the entire device. Thus, if you provision a device profile, the restrictions and policies are applied to the device irrespective of the users utilizing the Chromebook. These restrictions and policies get applied to all the users using the Chromebook. In case of user profile, the restriction and policies are applied to the user and not to the Chromebook being used by the user. These restrictions and policies get applied to the user in any Chromebook the user utilizes, as the policies are associated to the user. You can learn more about the user and device profiles applicable for Chromebook below:
Restrictions - Restrictions related to device functionality such as Guest Mode, Ephemeral Mode etc.
Wi-Fi - Configuring Wi-Fi and proxy settings for devices to connect to a secure Wi-Fi network.
Ethernet - Configure Ethernet profile for all the managed devices.
Kiosk - Configure Kiosk profile to lock down the device to selective applications.
Certificate - Configure the certificates to be provisioned the device.
Verified Access - Configure access authentication verification policy.
User Restrictions - Restrictions specific to the users and not the entire device.
Wi-Fi - Configuring Wi-Fi and proxy settings for users to connect to a secure Wi-Fi network.
Ethernet - Configure Ethernet profile for all the managed devices.
Virtual Private Network(VPN) - Configuring VPN and proxy settings for the uses to securely access corporate data.
Certificate - Configure certificates to users to secure access to services such as E-mail, Wi-Fi etc.,
Power Management - Configure power settings for the managed device.
Chrome Browser Management - Configure policies for apps and extensions.
Web Content Filter - Blocklist or Allowlist contents to be viewed on the browser of a device.
Managed Bookmarks - Provide the list of bookmarks to be distributed to the user.
Apps and Extensions - Configure policies for apps and extensions.
Verified Access - Configure access authentication verification policy.