David Simpson Apps

Configuration for Tableau Server or Tableau Cloud

This guide explains how to configure Tableau Server or Tableau Cloud to enable dashboard and report embedding in external websites like monday.com. Administrators may need to whitelist specific domains to allow the Tableau Cloud Embedded app to function properly.

Prerequisites

  • Administration access to your Tableau Server or Cloud instance.

Key Domains to Whitelist

The Tableau Cloud Embedded app operates from these domains:

  • https://monday.dsapps.info
  • https://everyday.dsapps.info

Additional domains used by David Simpson Apps are listed at https://dsapps.dev/policies/domains/.

Configuration Steps

Step One: Enable Personal Access Tokens

Administrators must first enable Personal Access Tokens (PATs), which are disabled by default.

Checking Domain Allow Lists

Instructions for verifying domain allow list configurations:

REST API Configuration (Tableau 2022.2+)

View Current Settings

Use the GET endpoint: <server>/api/<api-version>/sites/<site-id>/settings/embedding

Default response shows unrestricted embedding enabled:

{
    "site": {
        "settings": [
            {
                "allowList": "",
                "unrestrictedEmbedding": true
            }
        ]
    }
}

Restrict to Allow List

To limit embedding, set unrestrictedEmbedding to false and populate the allowList with space-delimited domains:

{
    "site": {
        "settings": [
            {
                "allowList": "https://monday.dsapps.info https://everyday.dsapps.info https://*.mycompany.com",
                "unrestrictedEmbedding": false
            }
        ]
    }
}

The allow list supports wildcards and port numbers following Content Security Policy standards.

Further Resources