Go to Device Management -> Chrome Management -> Custom Settings.
Select the domain (or corresponding organizational unit) on the right.
Navigate to the following sections and configure them accordingly: Allow or block all apps and extensions. Allow apps and extensions.