Extension Events
Focus
Focus
Prisma Browser

Extension Events

Table of Contents

Extension Events

Extension events track the lifecycle of browser extensions within Prisma Browser — installations, removals, updates, and enable/disable actions.

Event Types

Event TypeUI NameDescription
extensionInstallExtension installedA browser extension was installed
extensionUninstallExtension uninstalledA browser extension was removed
extensionEnableExtension enabledA previously disabled extension was enabled
extensionDisableExtension disabledAn extension was disabled
extensionUpdateExtension updatedAn extension was updated to a new version

Context Fields — Extension Details

FieldUI LabelDescription
browserExtension.nameExtension nameThe display name of the extension
browserExtension.shortNameExtension short nameThe short name of the extension
browserExtension.idExtension IDThe Chrome Web Store extension identifier
browserExtension.versionExtension versionThe current version of the extension
browserExtension.descriptionDescriptionThe extension description
browserExtension.installTypeInstallation sourceHow the extension was installed (e.g., admin, normal, development, sideload)
browserExtension.enabledEnabledWhether the extension is currently enabled
browserExtension.disabledReasonDisabled reasonWhy the extension was disabled
browserExtension.homepageUrlURLThe extension homepage URL
browserExtension.updateUrlUpdate URLThe URL used for extension updates
browserExtension.permissionsPermissionsPermissions requested by the extension
browserExtension.hostPermissionsHost permissionsHost access permissions (URL patterns)
browserExtension.typeTypeExtension type
browserExtension.isAppIs appWhether this is a Chrome App (legacy)
browserExtension.offlineEnabledOffline enabledWhether the extension works offline
browserExtension.mayDisableMay disableWhether the user is allowed to disable this extension
browserExtension.optionsUrlOptions URLURL of the extension options page

Context Fields — Risk Assessment

FieldUI LabelDescription
extensionRisk.riskRiskRisk level assigned to the extension (Low, Medium, High, Malicious, Unknown)
extensionRisk.initiatorInitiatorWho initiated the install/uninstall/enable/disable action
extensionRisk.triggerTriggerWhat triggered the policy action on the extension

Initiator Values

ValueDescription
UserThe end user performed the action manually
PolicyAn extension policy rule triggered the action
AutomaticThe browser automatically performed the action (e.g., auto-update)

Trigger Values

ValueDescription
IDThe extension was matched by its extension ID in policy
PermissionsThe extension was matched because it requests specific permissions
RiskThe extension was matched because its risk level exceeds the configured threshold

Examples

Extension Installed — By User (Allowed)
FieldValue
TypeExtension installed
CategoryExtensions
Userjane.doe@acme.com
Extension nameGrammarly
Extension IDkbfnbcaeplbcioakkpcpgfkobkghlhen
Extension version14.1098.0
Installation sourceNormal
RiskLow
InitiatorUser
ActionAllowed
Policy ruleAllow low-risk extensions
Extension Disabled — By Policy (High Risk)
FieldValue
TypeExtension disabled
CategoryExtensions
Userjohn.smith@acme.com
Extension nameWeb Scraper Pro
Extension IDxyzabcdefghijklm
Extension version3.2.1
RiskHigh
TriggerRisk
InitiatorPolicy
ActionBlocked
Policy ruleDisable high-risk extensions
Extension Uninstalled — By Policy (Forbidden ID)
FieldValue
TypeExtension uninstalled
CategoryExtensions
Userbob.jones@acme.com
Extension nameUnauthorized VPN
Extension IDmnopqrstuvwxyzab
Extension version1.0.5
RiskMedium
TriggerID
InitiatorPolicy
ActionBlocked
Policy ruleBlock unauthorized VPN extensions