Name users when browsers aren't signed in

The console recognises people by the account signed in to Chrome or Edge. For browsers nobody signs in to, set the user by policy instead.

When people sign in to the browser with their work account, there's nothing to do: policies for their groups apply, and the audit log names them.

Otherwise, set userEmail for each person. It differs per person, so it goes in the user part of the registry (HKCU), which people can read but not change:

Windows Registry Editor Version 5.00

[HKEY_CURRENT_USER\SOFTWARE\Policies\Google\Chrome\3rdparty\extensions\bjhkclliijjffonmofmimpebcbigigem\policy]
"userEmail"="[email protected]"

[HKEY_CURRENT_USER\SOFTWARE\Policies\Microsoft\Edge\3rdparty\extensions\bjhkclliijjffonmofmimpebcbigigem\policy]
"userEmail"="[email protected]"

• Group Policy: add it under User Configuration, Preferences, Windows Settings, Registry. Where email addresses follow sign-in names, a value such as %LogonUser%@contoso.example sets it for everyone at once.
• The policy email takes precedence over the browser's signed-in account.
• Without either, only policies for all enrolled users apply to that browser.