Use Group Policy. This is supported by chrome.
It's pretty well documented how to do that:
Allows you to specify extensions that users can NOT install. Extensions already installed will be disabled if they are blacklisted, without the user being able to activate them. Once an extension disabled due to the blacklist is removed, it will be automatically reactivated.
A value of & # 39; * & # 39; Blacklist means that all extensions are blacklisted unless they are explicitly listed in the whitelist.
You can define other settings, such as whitelisting or forcing specific extensions. Do not try to create your own schema using custom permissions on parts of the Chrome user profile directory.