Hi.. I got the same question. I'm currently doing first tests and trying to integrate some extensions in our reporting. However as long as every single user has to allow the access upon opening the report the extensions won't make their way into our reports. That just annoys the users and won't increase the usage of the dashboards.
There is a setting in the Tableau server.
Manage All Sites > Settings > Extensions