Embedding and appearance settings

These organization and workspace settings control how reports are shown outside Fresco BI, and how Fresco BI looks for your people. To embed a single report, see Embed a report.

Before you start

• Organization settings need the Owner or Admin role in the organization.
• App tokens need the Admin role in the workspace.
• Custom branding needs the Enterprise plan.

Allow embedding

1. Open Organization settings and click Embed. See Organizations and workspaces.
2. Turn on the switch you need. Each change saves at once.

Switch	What it allows
Allow publish to web	Public links to reports. Anyone with a public link sees the report without signing in.
Allow authenticated embedding	Embedding a report in your own website or app with an app token. Your server asks Fresco BI for a short-lived embed token and Fresco BI applies row-level security.

When a switch is off, that option is locked in the Embed dialog of every report. People see “Your organization admin has turned off public embedding.” (or “authenticated embedding”, or “embedding”).

Allow publish to web

It is off by default. When you turn it off, every public link of the organization stops working at once. Turn it on again and the links that were not revoked work again.

Caution

A public link shows the data to anyone on the internet, including people outside your organization. A report whose data model has row-level security cannot be published this way. If row-level security roles are added to the model later, the existing link stops working.

Each report can have up to 5 active public links. See Embed a report.

Allow authenticated embedding

Turn it off and every report embedded with an app token stops showing at once. You also cannot create new app tokens. Turn it on again and they resume.

App tokens for secure embedding

Secure embedding shows a report inside your own website or app, and checks who may see it. It uses an app token of the workspace and needs Allow authenticated embedding to be on.

1. Open the workspace.
2. In the sidebar, under Workspace, click App tokens.
3. Click New app token.
4. Enter a Name, pick the Scope (All reports in the workspace or Pick reports) and when it Expires after.
5. In Allowed websites (optional), enter one site per line, for example https://portal.example.com. Leave it empty to allow any website.
6. Click New app token in the dialog.

The token is shown once. Keep it on your server and never send it to a browser.

A workspace can have up to 20 active app tokens. My workspace has no app tokens.

Custom branding

Custom branding puts your company’s logo, cover image and theme color in Fresco BI. It is part of the Enterprise plan: on other plans the section shows a note instead.

1. Open Organization settings and click Custom branding.
2. Set what you need:

Setting	Rules	Where it shows
Logo	PNG, up to 200 KB, at least 200 × 30 px. Click Upload logo.	The sidebar and the settings pages.
Cover image	JPG or PNG, up to 1 MB, at least 1920 × 160 px. Click Upload cover image.	The Home page of the workspace.
Theme color	A #rrggbb color. Pick it or type it, then click Save color.	Primary buttons and the selected sidebar item.

3. Click Preview. Only you see the branding, with a banner. Exit preview goes back.
4. Click Publish to apply it for everyone in the organization.

Until you publish, your changes are a draft: the status shows Unpublished changes. Discard changes drops the draft. Remove custom branding takes the logo, cover and color off, and everyone sees the default look again.

Note

If the color is too light for white text (contrast below 4.5:1), Fresco BI keeps the default accent and tells you. Public embedded reports keep the Fresco BI look.

Allow kiosk mode

Allow kiosk mode lets viewers show a report full screen on a TV, with page rotation. The device must still sign in.

1. Open Organization settings, click General, then Trash and audit log.
2. On the Overview tab, turn the Allow kiosk mode switch on or off.

Allowed S3 endpoints

AWS S3 is always allowed. To connect an S3-compatible service that is not AWS, add its host name here first.

1. On the Overview tab, in Allowed S3 endpoints, enter the host name only. Do not add https://, a port, a path or an IP address.
2. Click Add.

To take a host off, click Remove. The list holds up to 20 endpoints. See Connect data.

Organization and workspace images

You can set an image for the organization and for each workspace: PNG, JPEG or WebP, up to 1 MB.

• Organization: Organization settings › General › Change image.
• Workspace: in the sidebar, Workspace › Settings › Change image.

Questions

I turned off Allow publish to web. Do the old links come back? Yes. Turn the switch on again and links that were not revoked work again.

Does secure embedding need Allow publish to web? No. It needs Allow authenticated embedding and an app token.

Why can I not embed a report from My workspace? My workspace is private. Move the report to a shared workspace, then embed it.