From the Google Admin console Home page, go to Devices.

To get to Step 3 in the Token Enrollment Workflow, you need to generate an enrollment token:

Workspace ONE UEM can help you with Step 3 in this process-deploying the enrollment tokens to your Windows and macOS endpoints. Here is a workflow of the enrollment process from the Chrome Browser Cloud Management whitepaper: This blog provides a brief overview of how to use Workspace ONE UEM to deploy these tokens to Windows 10 and macOS devices. Instead, VMware Workspace ONE ® administrators manage the devices with enrollment tokens that are Globally Unique Identifiers (GUID) randomly generated in the Google Admin console. Users don't need to sign in to Google in their browsers to enable Cloud Management. From the Google Admin console, you can also take quick action on devices, such as blocking or force-installing a specific extension. With Chrome Browser Cloud Management, you can see reports on deployed versions, device information, apps, and extensions installed, or management policies applied. But most recently, there have been some significant advancements in the Google Admin console to centrally manage and quickly see the status of Chrome Browser across your business desktop endpoints. The Chrome Browser can be configured and managed in several ways.

Airwatch google chrome settings