Setting up Granola Watermark (Admin Guide) - Granola Docs & Help Center

macOS 14+ Windows 11 (beta)

This guide is for Enterprise plan admins who want to enforce transparency features for everyone in their workspace. On a Free or Business plan? See user guide to set it up just for yourself.

In Settings > Workspace > General > Transparency, if Granola Watermark for your team shows a Contact us button (as below), it isn’t enabled for your workspace yet. Email hey@granola.so if you’d like us to turn it on. In the meantime, you can try the watermark for yourself through individual settings.

The workspace Transparency settings showing a Contact us button next to Granola Watermark for your team.

Setup has three parts: (1) enable at least one automated chat message option, (2) install the Granola camera on each device, and (3) enable watermark for your workspace.

Granola Watermark is available on macOS 14.0+ and Windows 11.

1. Enable at least one automated chat message option (required)

Before you can start watermark setup, your workspace must have at least one automated chat message option enabled:

This prerequisite exists because if a user turns their camera off mid-call, Granola can continue transcribing only after transparency has already been established in that meeting — either an automated chat message was sent, or the user had already shown Granola Watermark earlier in the same call.

2. Enable for your workspace (admin)

The workspace "Watermark on video" settings page with the Turn on watermark option.

Open Settings > Workspace > General, then in the Transparency section find Show a watermark on workspace members’ video.
Click Set up, complete the wizard, and click Enable for all users.

Once enabled, workspace members are prompted to complete a one-time setup flow in Granola the next time they open the app. This requires them to switch their meeting camera to a Granola Watermark option before they can transcribe — if their meeting app isn’t using Granola Watermark, Granola may stop transcribing until they switch to one. Workspace members can’t opt out from individual preferences.

3. Install the Granola camera on each device

Workspace admins can use MDM to remove the admin/password prompts from the Granola camera setup flow.

The steps below are a starting point. Exact deployment steps depend on your MDM tool. If you need help with a specific MDM, contact hey@granola.so.

macOS
Windows (beta)

The Granola camera is delivered as a system extension bundled inside Granola.app. To remove admin approval prompts, pre-approve the system extension (team ID QZ7DHHLN25, bundle ID com.granola.app.GranolaMacWebcam.Extension) with a com.apple.system-extension-policy configuration profile. Below is an example .mobileconfig you can use directly, or adapt as a starting point.

allow-granola-webcam-system-extension.mobileconfig

<?xml version="1.0" encoding="UTF-8"?>
<!DOCTYPE plist PUBLIC "-//Apple//DTD PLIST 1.0//EN" "http://www.apple.com/DTDs/PropertyList-1.0.dtd">
<plist version="1.0">
<dict>
    <key>PayloadContent</key>
    <array>
        <dict>
            <key>AllowedSystemExtensions</key>
            <dict>
                <key>QZ7DHHLN25</key>
                <array>
                    <string>com.granola.app.GranolaMacWebcam.Extension</string>
                </array>
            </dict>
            <key>PayloadDescription</key>
            <string>Pre-approves the Granola camera extension.</string>
            <key>PayloadDisplayName</key>
            <string>System Extensions</string>
            <key>PayloadIdentifier</key>
            <string>ai.granola.allow-granola-webcam-system-extension.system-extension-policy</string>
            <key>PayloadOrganization</key>
            <string>Granola</string>
            <key>PayloadType</key>
            <string>com.apple.system-extension-policy</string>
            <key>PayloadUUID</key>
            <string>FB488C66-A746-4D92-873A-71F5DF50F88B</string>
            <key>PayloadVersion</key>
            <integer>1</integer>
        </dict>
    </array>
    <key>PayloadDescription</key>
    <string>Pre-approves the Granola camera extension.</string>
    <key>PayloadDisplayName</key>
    <string>Allow Granola Watermark system extension</string>
    <key>PayloadIdentifier</key>
    <string>ai.granola.allow-granola-webcam-system-extension</string>
    <key>PayloadOrganization</key>
    <string>Granola</string>
    <key>PayloadScope</key>
    <string>System</string>
    <key>PayloadType</key>
    <string>Configuration</string>
    <key>PayloadUUID</key>
    <string>6F9F8E39-818F-4CF9-942C-3B2B68C6B1E8</string>
    <key>PayloadVersion</key>
    <integer>1</integer>
</dict>
</plist>

Once the profile is applied, workspace members don’t need admin permissions to install the Granola camera. They just complete a one-time setup flow in Granola.

Granola Watermark for Windows is in beta. Only use these steps if Granola has enabled Windows watermark for your workspace. To join the beta, email us at hey@granola.so.

On Windows, installing the Granola camera requires writing entries under HKLM\SOFTWARE\Classes\CLSID, which requires admin rights. Below is an example script for setting up the registry keys required. Run it elevated (as SYSTEM / admin) via your MDM during device provisioning so workspace members don’t see an admin prompt.

GranolaVirtualCameraInstall.ps1

# GranolaVirtualCamInstaller - Register the Granola camera COM server.
#
# Writes the CLSID InprocServer32 entry to HKLM so Frame Server can find the DLL.
# Must be run as Administrator.

$ErrorActionPreference = "Stop"

# Admin check
$isAdmin = ([Security.Principal.WindowsPrincipal] [Security.Principal.WindowsIdentity]::GetCurrent()).IsInRole(
    [Security.Principal.WindowsBuiltInRole]::Administrator)
if (-not $isAdmin) {
    Write-Host "Error: This script requires Administrator privileges."
    exit 1
}

$ClsidKey = "HKLM:\SOFTWARE\Classes\CLSID\{63F1BB5C-B141-4E20-948C-6293D4722568}"
$InprocKey = "$ClsidKey\InprocServer32"
$DllPath = Join-Path $env:PROGRAMDATA "Granola\VirtualCamera\VirtualCameraMediaSource.dll"

# Create CLSID key
New-Item -Path $ClsidKey -Force | Out-Null
Set-ItemProperty -Path $ClsidKey -Name "(Default)" -Value "VirtualCameraMediaSource"

# Create InprocServer32 subkey
New-Item -Path $InprocKey -Force | Out-Null
Set-ItemProperty -Path $InprocKey -Name "(Default)" -Value $DllPath
Set-ItemProperty -Path $InprocKey -Name "ThreadingModel" -Value "Both"

# Verify registration succeeded
if (-not (Test-Path $InprocKey)) {
    Write-Host "Error: COM registration verification failed."
    exit 1
}

Write-Host "COM server registered successfully."
Write-Host "  CLSID: {63F1BB5C-B141-4E20-948C-6293D4722568}"
Write-Host "  DLL:   $DllPath"
exit 0

Once the script has run, workspace members don’t need admin permissions to install the Granola camera. They just complete a one-time setup flow in Granola.

What workspace members need to do

Workspace members complete a one-time setup flow on their device, then choose a Granola Watermark camera in their meeting app. When Granola Watermark is enabled for the workspace:

Workspace members can’t opt out from individual preferences.
Granola may stop transcribing until the workspace member’s meeting app is using the Granola camera.
They still need to select Granola Watermark in each meeting app they use. Most meeting apps remember this choice.

You can share Setting up Granola Watermark on Mac with workspace members so they know how to set up, use, and troubleshoot the watermark.

Communicate the rollout

Before enabling or requiring the watermark, tell workspace members:

Granola Watermark appears only while Granola is transcribing.
It is available on macOS 14.0+ and Windows 11+ (Windows is beta).
They need to complete a one-time setup flow in Granola.
They need to choose a Granola Watermark camera in Zoom, Google Meet, Microsoft Teams, or any other meeting app they use.
If the workspace requires the watermark, they won’t be able to turn it off from individual preferences.
Granola may stop transcribing until they switch their meeting app to the Granola camera.
If someone turns their camera off mid-call, Granola can continue only after transparency has already been established in that meeting (an automated chat message was sent, or Granola Watermark had already been shown earlier in the call).

Questions? Contact hey@granola.so.

​1. Enable at least one automated chat message option (required)

​2. Enable for your workspace (admin)

​3. Install the Granola camera on each device

​What workspace members need to do

​Communicate the rollout

1. Enable at least one automated chat message option (required)

2. Enable for your workspace (admin)

3. Install the Granola camera on each device

What workspace members need to do

Communicate the rollout