Setting up Granola Watermark (Admin Guide) - Granola Docs & Help Center

macOS 14+ Windows (beta)

This guide is for Enterprise plan admins who want to enforce transparency features for everyone in their workspace. On a Free or Business plan? See user guide to set it up just for yourself.

Setup has three parts: an admin enables it for their workspace, installs the Granola camera on each device, then sets up each meeting app members use.

Granola Watermark is available for Mac users on macOS 14.0 or later.

1. Enable for your workspace (admin)

If you don’t see this setting, contact hey@granola.so to have Granola Watermark enabled for your workspace.

The workspace "Watermark on video" settings page with the Turn on watermark option.

Open Settings > Workspace > General, then in the Transparency section find Show a watermark on workspace members’ video.
Click Set up, complete the wizard, and click Enable for all users.

Once enabled, workspace members are prompted to complete a one-time setup flow in Granola the next time they open the app. This requires them to switch their meeting camera to a Granola Watermark option before they can transcribe — if their meeting app isn’t using Granola Watermark, Granola may stop transcribing until they switch to one. Members can’t opt out from individual preferences.

2. Install the Granola camera on each device

Workspace admins can use MDM to remove the admin/password prompts from the watermark camera setup flow.

The steps below are a starting point. Exact deployment steps depend on your MDM tool. If you need help with a specific MDM, contact hey@granola.so.

macOS
Windows (beta)

The watermark camera is delivered as a system extension bundled inside Granola.app. To remove admin approval prompts, pre-approve the system extension (team ID QZ7DHHLN25, bundle ID com.granola.app.GranolaMacWebcam.Extension) with a com.apple.system-extension-policy configuration profile. Below is an example .mobileconfig you can use directly, or adapt as a starting point.

allow-granola-webcam-system-extension.mobileconfig

<?xml version="1.0" encoding="UTF-8"?>
<!DOCTYPE plist PUBLIC "-//Apple//DTD PLIST 1.0//EN" "http://www.apple.com/DTDs/PropertyList-1.0.dtd">
<plist version="1.0">
<dict>
    <key>PayloadContent</key>
    <array>
        <dict>
            <key>AllowedSystemExtensions</key>
            <dict>
                <key>QZ7DHHLN25</key>
                <array>
                    <string>com.granola.app.GranolaMacWebcam.Extension</string>
                </array>
            </dict>
            <key>PayloadDescription</key>
            <string>Pre-approves the Granola virtual webcam camera extension.</string>
            <key>PayloadDisplayName</key>
            <string>System Extensions</string>
            <key>PayloadIdentifier</key>
            <string>ai.granola.allow-granola-webcam-system-extension.system-extension-policy</string>
            <key>PayloadOrganization</key>
            <string>Granola</string>
            <key>PayloadType</key>
            <string>com.apple.system-extension-policy</string>
            <key>PayloadUUID</key>
            <string>FB488C66-A746-4D92-873A-71F5DF50F88B</string>
            <key>PayloadVersion</key>
            <integer>1</integer>
        </dict>
    </array>
    <key>PayloadDescription</key>
    <string>Pre-approves the Granola virtual webcam camera extension.</string>
    <key>PayloadDisplayName</key>
    <string>Allow Granola watermark system extension</string>
    <key>PayloadIdentifier</key>
    <string>ai.granola.allow-granola-webcam-system-extension</string>
    <key>PayloadOrganization</key>
    <string>Granola</string>
    <key>PayloadScope</key>
    <string>System</string>
    <key>PayloadType</key>
    <string>Configuration</string>
    <key>PayloadUUID</key>
    <string>6F9F8E39-818F-4CF9-942C-3B2B68C6B1E8</string>
    <key>PayloadVersion</key>
    <integer>1</integer>
</dict>
</plist>

Once the profile is applied, members don’t need admin permissions to install the watermark camera. They just complete a one-time setup flow in Granola.

Granola Watermark for Windows is in beta. Only use these steps if Granola has enabled Windows Watermark for your workspace. To join the beta, email us at hey@granola.so.

On Windows, installing the virtual camera requires writing entries under HKLM\SOFTWARE\Classes\CLSID, which requires admin rights. Below is an example script for setting up the registry keys required. Run it elevated (as SYSTEM / admin) via your MDM during device provisioning so members don’t see an admin prompt.

GranolaVirtualCameraInstall.ps1

# GranolaVirtualCamInstaller - Register the virtual camera COM server.
#
# Writes the CLSID InprocServer32 entry to HKLM so Frame Server can find the DLL.
# Must be run as Administrator.

$ErrorActionPreference = "Stop"

# Admin check
$isAdmin = ([Security.Principal.WindowsPrincipal] [Security.Principal.WindowsIdentity]::GetCurrent()).IsInRole(
    [Security.Principal.WindowsBuiltInRole]::Administrator)
if (-not $isAdmin) {
    Write-Host "Error: This script requires Administrator privileges."
    exit 1
}

$ClsidKey = "HKLM:\SOFTWARE\Classes\CLSID\{63F1BB5C-B141-4E20-948C-6293D4722568}"
$InprocKey = "$ClsidKey\InprocServer32"
$DllPath = Join-Path $env:PROGRAMDATA "Granola\VirtualCamera\VirtualCameraMediaSource.dll"

# Create CLSID key
New-Item -Path $ClsidKey -Force | Out-Null
Set-ItemProperty -Path $ClsidKey -Name "(Default)" -Value "VirtualCameraMediaSource"

# Create InprocServer32 subkey
New-Item -Path $InprocKey -Force | Out-Null
Set-ItemProperty -Path $InprocKey -Name "(Default)" -Value $DllPath
Set-ItemProperty -Path $InprocKey -Name "ThreadingModel" -Value "Both"

# Verify registration succeeded
if (-not (Test-Path $InprocKey)) {
    Write-Host "Error: COM registration verification failed."
    exit 1
}

Write-Host "COM server registered successfully."
Write-Host "  CLSID: {63F1BB5C-B141-4E20-948C-6293D4722568}"
Write-Host "  DLL:   $DllPath"
exit 0

Once the script has run, members don’t need admin permissions to install the virtual camera. They just complete a one-time setup flow in Granola.

3. Set up each meeting app

Each meeting app members use needs a one-time deployment so the watermark works reliably.

Zoom
Google Meet

If your workspace uses Zoom, Granola needs the macOS Accessibility permission to detect when new participants join the call. To grant it without user prompts, push a Privacy Preferences Policy Control (PPPC) profile through your MDM for:

Team ID: QZ7DHHLN25
Bundle ID: com.granola.app
Service: Accessibility

The workspace setup wizard in Granola includes a copyable PPPC template for this permission.

For Google Meet, the watermark relies on the Granola Chrome extension. Force-install it from the Google Admin Console before rolling out:

In the Google Admin Console, go to Devices > Chrome > Apps & extensions > Users & browsers (admin.google.com).
Click the + (plus) button in the lower-right corner and choose Add from Chrome Web Store.
Click Search by ID in the upper right, paste the extension ID opaadbjlebbbnmjjgdmdllingedoleml, then click Select.
Add the extension and set the installation policy to Force install + pin to browser toolbar.

Force-install through Google Admin applies to Google Chrome. Members on other supported browsers (Edge, Arc, Brave) may need to install the Granola browser extension manually.

What members need to do

Members complete a one-time setup flow on their device, then choose a Granola Watermark camera in their meeting app. When Granola Watermark is enabled for the workspace:

Members can’t opt out from individual preferences.
Granola may stop transcribing until the member’s meeting app is using a Granola Watermark camera.
They still need to select Granola Watermark in each meeting app they use. Most meeting apps remember this choice.

You can share Setting up Granola Watermark on Mac with workspace members so they know how to set up, use, and troubleshoot the watermark.

Communicate the rollout

Before enabling or requiring the watermark, tell workspace members:

Granola Watermark appears only while Granola is transcribing.
It is available for Mac users on macOS 14.0 or later.
They need to complete a one-time setup flow in Granola.
They need to choose a Granola Watermark camera in Zoom, Google Meet, Microsoft Teams, or any other meeting app they use.
If the workspace requires the watermark, they won’t be able to turn it off from individual preferences.
Granola may stop transcribing until they switch their meeting app to a Granola Watermark camera.

Questions? Contact hey@granola.so.

​1. Enable for your workspace (admin)

​2. Install the Granola camera on each device

​3. Set up each meeting app

​What members need to do

​Communicate the rollout

1. Enable for your workspace (admin)

2. Install the Granola camera on each device

3. Set up each meeting app

What members need to do

Communicate the rollout