Computer Configuration > Administrative Templates > Google Chrome > Content settings
Both
HKLM\Software\Policies\Google\Chrome
For security reasons, the requestFullscreen() web API requires a prior user gesture ("transient activation") to be called or will otherwise fail. Users' personal settings may allow certain origins to call this API without a prior user gesture, as described in https://chromestatus.com/feature/6218822004768768. This policy supersedes users' personal settings and allows matching origins to call the API without a prior user gesture. For detailed information on valid url patterns, please see https://cloud.google.com/docs/chrome-enterprise/policies/url-patterns. Wildcards, *, are allowed. Origins matching both blocked and allowed policy patterns will be blocked. Origins not specified by policy nor user settings will require a prior user gesture to call this API. Example value: https://www.example.com [*.]example.edu