To force-install the Surf extension for users in your organization using Google Workspace, follow these steps in the Admin Console:

1. Sign in to the Google Admin console at admin.google.com.
2. Go to Devices → Chrome → Apps & extensions → Users & browsers.
3. Select the relevant Organizational Unit (OU) or group.
4. Click the "+" button, then select Add from Chrome Web Store.
5. Search for the Surf extension, then set the Installation policy to Force install (you may also choose to pin it).

Once configured, Chrome will automatically install or update the extension for users when their browser syncs.

Note: it may take up to 24–48 hours for the changes to propagate, especially for private or domain-restricted extensions.