Setting up speaker labels across your organisation (for admins)
How to roll out speaker labels on the Enterprise plan, the permissions needed, and what to tell people at deployment.
Speaker labels can be made available without each member of staff setting them up individually. These are the steps for IT. They cover distributing the browser extension in bulk, pre-granting macOS accessibility permission, and the internal announcement that goes with the rollout. To set this up for your own account only, see the per-tool steps in Speaker labels.
Enterprise plan
Distributing for Google Meet requires administrator rights in the Google Admin console; pre-granting for Zoom (macOS) requires administrative rights in the MDM the Macs are enrolled in. The browser extension and accessibility permission you distribute are also used by the transparency features, so if you have already rolled those out, the distribution work in this article may be unnecessary.
The rollout at a glance
What you need to distribute depends on the combination of meeting tool and operating system.
| Meeting tool | macOS | Windows | What to distribute |
|---|---|---|---|
| Google Meet | supported | supported | the Pulse browser extension (distributed from the Google Admin console) |
| Zoom | supported | not supported | macOS accessibility permission (pre-granted through MDM) |
Once distribution is complete, ask each member of staff to open Settings > Preferences > Speaker labels in the desktop app and confirm that the row for the meeting tool they use shows enabled. Wording for that request is under “What to ask staff to do afterwards”.
Decisions to make before you start
For a company-wide rollout in a Japanese IT department, the announcement and the support arrangements usually take more time than the distribution work itself. We recommend settling at least these four points before you begin.
- Scope: distribute to everyone, or only to particular departments or sites? If limiting it, decide whether to divide by organisational unit or by Google group.
- Timing and channel of the announcement: how many working days before the rollout, and through which channel (company-wide email, intranet, a general chat channel)?
- Support contact: will the IT help desk take first-line enquiries, or will you point people at Pulse support? If you set up an internal contact, share “Likely questions and answers” with them in advance.
- Consistency with internal rules on meeting records: enabling speaker labels means who said what is kept on record. If you have internal rules on meeting records, check this does not contradict them.
The name recorded as a speaker label is the participant's display name in the meeting tool. Where a real name is used, that name may constitute personal information linked to what was said; the point, and what the Act on the Protection of Personal Information requires in that case, are set out under “Speaker labels and personal information” in Speaker labels. Notifying staff of the purpose of use, the notice given at the start of meetings with external attendees, and draft wording for internal rules are covered in How far you can rely on AI meeting notes (a guide for teams), so read that before drafting your announcement.
Google Meet: distributing the browser extension
Speaker labels in Google Meet work through the Pulse browser extension. The extension has to be installed in the browser profile each member of staff uses for Google Meet.
You can distribute it automatically to the whole organisation from the Google Admin console, or narrow the audience using organisational units (OUs) or Google groups.
Adding the extension
Sign in to the Google Admin console
Google Admin console with an administrator account.
Open the apps and extensions settings
Devices > Chrome > Apps & extensions > Users & browsers.
Add from the Chrome Web Store
Choose the + (plus) button at the bottom right, then Add from Chrome Web Store.
Search by extension ID
Choose Search by ID at the top right and paste the Pulse extension ID.
Add the extension
Select to add the extension.
Set the installation policy
Force install, or Force install + pin to browser toolbar. Pinning it to the toolbar makes it easier for staff to see that the extension is present.
Before publishing, replace this with a link to the Pulse extension's page on the Chrome Web Store and the real extension ID. No values are given in this article.
Showing the “Add from Chrome Web Store” button and the search-by-ID field.
Narrowing who receives it
By default the setting applies to the whole organisation. To distribute only to particular departments, sites or teams, use one of the following.
Option 1: narrow by organisational unit (OU)
Organisational units group users by department, site and so on, so that different policies can be applied to each.
- In the Google Admin console, open Directory > Organisational units.
- If there is no organisational unit for the group in question yet, create one.
- Move the relevant users into that organisational unit.
- Devices > Chrome > Apps & extensions > Users & browsers.
- In the left sidebar, select the organisational unit rather than the top-level organisation.
- Add and configure the Pulse extension against that organisational unit. It will be installed only for users in it.
Option 2: narrow by Google group
Where restructuring organisational units is not practical, you can target distribution using a Google group. This suits teams that span several organisational units, such as a cross-site project.
- In the Google Admin console, open Directory > Groups.
- Create a new group containing the users you want to distribute to, or use an existing one.
- Devices > Chrome > Apps & extensions > Users & browsers.
- In the left sidebar, search for and select the group.
- Add and configure the Pulse extension against that group. It will be installed only for its members.
You might, for example, force install for an organisational unit representing a particular site while allowing installation for a Google group representing a cross-site project team. For a phased rollout, the safe approach is to target only the IT department's organisational unit first, confirm the behaviour, and widen from there.
The extension works in Google Chrome and supported Chromium-based browsers (Microsoft Edge, Arc, Brave). Force install from the Google Admin console applies to Google Chrome. Staff using another supported browser have to install it from the Chrome Web Store themselves. If browsers other than Chrome are in use internally, check what people actually use before you start.
The setup steps for each member of staff after distribution are in Using speaker labels in Google Meet.
Zoom: pre-granting accessibility permission
Speaker labels in Zoom use the Zoom Workplace desktop app together with macOS accessibility permission. No browser extension is involved. Support differs by operating system.
Users can grant the permission themselves, but on a managed Mac you can pre-grant it through MDM so that no permission prompt is shown to the user. The steps are under “Pre-granting through MDM” below.
What the permission covers — that Pulse uses it to read the participant names and speaking indicator shown on Zoom's screen, and not to record the screen or audio or to access the camera or microphone — is explained under “About the accessibility permission” in Using speaker labels in Zoom. This comes up often when explaining the rollout internally, so a sentence about it in your announcement will reduce enquiries.
Pre-granting through MDM
Accessibility permission can be pre-granted on managed devices by distributing a PPPC (Privacy Preferences Policy Control) configuration profile. The profile identifies the Pulse app by its signing details (team ID and bundle ID) and grants it access to the accessibility service.
Below is an example .mobileconfig you can use as-is or adapt to your environment.
<?xml version="1.0" encoding="UTF-8"?>
<!DOCTYPE plist PUBLIC "-//Apple//DTD PLIST 1.0//EN" "http://www.apple.com/DTDs/PropertyList-1.0.dtd">
<plist version="1.0">
<dict>
<key>PayloadContent</key>
<array>
<dict>
<key>PayloadDescription</key>
<string>Grants the macOS accessibility permission used to read speaker information from Zoom for speaker labels.</string>
<key>PayloadDisplayName</key>
<string>Privacy Preferences Policy Control</string>
<key>PayloadIdentifier</key>
<string>〔reverse-domain identifier〕.allow-accessibility.pppc</string>
<key>PayloadOrganization</key>
<string>UNCHAIN, Inc.</string>
<key>PayloadType</key>
<string>com.apple.TCC.configuration-profile-policy</string>
<key>PayloadUUID</key>
<string>〔generated UUID〕</string>
<key>PayloadVersion</key>
<integer>1</integer>
<key>Services</key>
<dict>
<key>Accessibility</key>
<array>
<dict>
<key>Allowed</key>
<integer>1</integer>
<key>CodeRequirement</key>
<string>identifier "〔bundle ID〕" and anchor apple generic and certificate 1[field.1.2.840.113635.100.6.2.6] /* exists */ and certificate leaf[field.1.2.840.113635.100.6.1.13] /* exists */ and certificate leaf[subject.OU] = 〔team ID〕</string>
<key>Comment</key>
<string></string>
<key>Identifier</key>
<string>〔bundle ID〕</string>
<key>IdentifierType</key>
<string>bundleID</string>
<key>StaticCode</key>
<integer>0</integer>
</dict>
</array>
</dict>
</dict>
</array>
<key>PayloadDescription</key>
<string>Grants the macOS accessibility permission used to read speaker information from Zoom for speaker labels.</string>
<key>PayloadDisplayName</key>
<string>Allow accessibility permission (speaker labels)</string>
<key>PayloadIdentifier</key>
<string>〔reverse-domain identifier〕.allow-accessibility</string>
<key>PayloadOrganization</key>
<string>UNCHAIN, Inc.</string>
<key>PayloadScope</key>
<string>System</string>
<key>PayloadType</key>
<string>Configuration</string>
<key>PayloadUUID</key>
<string>〔generated UUID〕</string>
<key>PayloadVersion</key>
<integer>1</integer>
</dict>
</plist>
〔bundle ID〕 and 〔team ID〕 take the signing details of the Pulse desktop app (the app's bundle identifier and the team identifier on the signing certificate). If these two values do not match the actual signature, the profile will distribute but the permission will not be granted. You can obtain the values from tharada@the-unchain.com.〔generated UUID〕 takes a different generated UUID in each of the two places, and 〔reverse-domain identifier〕 takes your own domain reversed (for example jp.example.it).
A PPPC profile has to be distributed from the MDM the device is enrolled in (Jamf, Microsoft Intune, Kandji, Mosyle, Cisco Meraki and so on). If the profile is installed manually it appears under System Settings > General > Device Management but the permission is not granted. Depending on your macOS version, that screen may be called “Profiles” in System Preferences.
The setup steps for each member of staff after distribution are in Using speaker labels in Zoom.
What to ask staff to do afterwards
Once you have distributed the extension or the accessibility permission, ask staff to check the following.
- Open the desktop app (and confirm it has updated to the latest version).
- Settings > Preferences > Speaker labels.
- Confirm the row for the meeting tool they use shows enabled. - Google Meet: connects automatically once the extension is installed in the browser profile. - Zoom: even with accessibility permission pre-granted through MDM, choosing Set up on the Zoom row may still be required the first time.
If a row will not connect, point people to the troubleshooting in Using speaker labels in Google Meet and Using speaker labels in Zoom.
- In the Google Admin console, the extension is assigned as force install to the target organisational unit or group
- In the MDM console, the PPPC configuration profile shows as distributed to the target Macs
- On a test machine, the relevant row under Settings > Preferences > Speaker labels shows enabled, and participant names appear in the transcript of a test meeting
Sample internal announcements
A company-wide notice to send a few working days before the rollout, and a short chat post for the day itself. Fill in 〔date〕 with the rollout date, 〔help desk contact〕 with your internal support contact, 〔meeting recording and transcription policy〕 with the name of the relevant internal policy, and 〔intranet URL〕 with the URL of your guidance page.
Company-wide email (three working days before rollout)
Subject: [Notice] Speaker names in meeting notes will be enabled from 〔date〕 (IT Department)
To all staff
Hello, this is the IT Department.
From 〔date〕, we are enabling “speaker labels” company-wide in the meeting notes tool 〔Pulse〕, which show the name of the person speaking in the transcript. We will also distribute the browser extension and device permission required, automatically, from our side.
■ What changes In meeting transcripts, passages that until now showed only “me” and “them” will show the display name from the meeting tool. This makes it easier to see who said what when reading minutes later.
■ What we ask you to do From 〔date〕, open “Settings > Preferences > Speaker labels” in the app and check that the row for the meeting tool you use shows “enabled”. If nothing changes, update the app to the latest version and check again.
■ What we are distributing - If you use Google Meet: the browser extension (installed into Chrome automatically) - If you use Zoom on a Mac: accessibility permission (configured automatically through device management) * This permission is used to read the participant names shown on Zoom's screen. It is not used to record the screen or audio, or to access the camera or microphone.
■ About how records are handled Please follow 〔meeting recording and transcription policy〕 on the extent to which meetings may be recorded and transcribed. In meetings with external attendees, please continue to say at the start that the meeting is being recorded.
If you have any questions, please contact 〔help desk contact〕.
IT Department
Chat post (on the day)
“Speaker labels” are now enabled in meeting notes, so the name of the person speaking appears in transcripts. Please check under “Settings > Preferences > Speaker labels” that the meeting tool you use shows “enabled”. If it does not display correctly, contact 〔help desk contact〕. Full details are at 〔intranet URL〕.
Likely questions and answers
Suggested answers for a help desk taking first-line enquiries.
| Enquiry | Key points of the answer |
|---|---|
| “An extension appeared without my doing anything — what is it?” | Explain that IT distributed it so that speaker names appear in meeting notes, and that it does not capture meeting audio or video. |
| “What is the accessibility permission used for?” | Explain that it is used solely to read the participant names and speaking indicator shown on Zoom's screen, and not for screen recording, audio recording, the camera or the microphone. |
| “I use a browser other than Chrome” | Explain that force install applies only to Chrome, and that Edge, Arc and Brave require manual installation. |
| “Names do not appear in Zoom on Windows” | Explain that Windows is not supported at this time. Google Meet does work on Windows. |
| “I want to add names to past minutes” | Explain that speaker labels work only while recording, so they do not apply to past transcripts. |
| “I do not want my name recorded” | Decide the response based on your internal policy on meeting records. Disabling the permission or extension on an individual's machine stops speaker labels working, but agree in advance how you want to handle this in practice. |
| “Someone outside the company asked about the recording” | Point to the sample wording for a notice at the start of a meeting and the explanation of what is retained.How far you can rely on AI meeting notes (a guide for teams) is worth making available from your intranet too, so people can check quickly. |
Frequently asked questions
Q. Does the browser extension access meeting content?
A. For speaker labels, what the extension reads is the participant names and speaking indicator in Google Meet. It does not access meeting audio, video or transcripts. If your workspace also uses the Google Meet transparency features, the same extension is used to send the automatic notice to meeting chat.
Q. Is separate distribution needed for the transparency features?
A. The browser extension and macOS accessibility permission are common to speaker labels and the transparency features. If you have distributed them for speaker labels, the prerequisites for the transparency features are already met. The transparency features do, however, have their own workspace-side settings, and in Google Meet a setting for pinning the notice in meeting chat. For details see Enabling the transparency features for your organisation (for admins).
Q. Can I stop particular departments from using speaker labels?
A. For Google Meet, you can create a scope that receives nothing by narrowing extension distribution by organisational unit or Google group. For Zoom, limit the scope of the profile granting accessibility permission on the MDM side. In either case, transcripts for staff outside the scope show “me” and “them”.