This guide explains how to configure Tableau Server or Tableau Cloud to enable dashboard and report embedding in external websites like monday.com. Administrators may need to whitelist specific domains to allow the Tableau Cloud Embedded app to function properly.
Prerequisites
- Administration access to your Tableau Server or Cloud instance.
Key Domains to Whitelist
The Tableau Cloud Embedded app operates from these domains:
https://monday.dsapps.infohttps://everyday.dsapps.info
Additional domains used by David Simpson Apps are listed at https://dsapps.dev/policies/domains/.
Configuration Steps
Step One: Enable Personal Access Tokens
Administrators must first enable Personal Access Tokens (PATs), which are disabled by default.
Checking Domain Allow Lists
Instructions for verifying domain allow list configurations:
REST API Configuration (Tableau 2022.2+)
View Current Settings
Use the GET endpoint: <server>/api/<api-version>/sites/<site-id>/settings/embedding
Default response shows unrestricted embedding enabled:
{
"site": {
"settings": [
{
"allowList": "",
"unrestrictedEmbedding": true
}
]
}
}
Restrict to Allow List
To limit embedding, set unrestrictedEmbedding to false and populate the allowList with space-delimited domains:
{
"site": {
"settings": [
{
"allowList": "https://monday.dsapps.info https://everyday.dsapps.info https://*.mycompany.com",
"unrestrictedEmbedding": false
}
]
}
}
The allow list supports wildcards and port numbers following Content Security Policy standards.