The iFrame widget shows a page from another website inside your Avaza dashboard: a Power BI or Looker Studio report, a Loom or YouTube video, a Figma prototype or a Google Sheet. Your key information stays in one place, and the page itself stays on the other site.
You can add it to your account dashboard, to a project's Summary view and to a company's Dashboard tab.
Approve the domain first
The widget only loads pages from domains on your account's approved list, and only over HTTPS. Until at least one domain is on the list, no iFrame widget loads. Administrators and Finance Managers manage the list:
Go to Settings › General and scroll to Embed Widget - Allowed Domains.
Type the domain, such as app.powerbi.com, and an optional note.
Click Add Domain. It takes effect straight away.
Enter the domain only, without https://, a path or a port. IP addresses aren't allowed. A wildcard covers subdomains: *.google.com allows docs.google.com and lookerstudio.google.com, but not google.com itself, so add that separately if you need it. A wildcard must include a second-level domain, so *.com isn't allowed.
To remove a domain, click its bin icon and confirm. iFrame widgets that use it no longer load and show a message instead. See managing general settings.
Examples of domains you might approve:
Domain | Used for |
|---|---|
app.powerbi.com | Power BI reports |
lookerstudio.google.com | Looker Studio reports |
docs.google.com | Google Docs, Sheets and Slides |
*.figma.com | Figma prototypes and designs |
*.loom.com | Loom recordings |
*.youtube.com | YouTube videos |
YouTube videos embedded in privacy-enhanced mode | |
player.vimeo.com | Vimeo videos |
Add the widget
Open your dashboard and click Add to Dashboard at the top right.
The button isn't shown on phone-sized screens, so use a computer or tablet.In the Add a Widget library, find iFrame and click Add to Dashboard.
The new widget is empty until you give it an address. Click its cog and choose Widget Settings.
Give the widget a Title, such as "Weekly sales report".
In Embed URL, paste the page's HTTPS address or its whole embed code. If you paste an embed code, Avaza takes the address out of it and shows "URL extracted from embed code".
Click Save.
Most tools have a separate embed link, often under Share › Embed. Use it: the normal page address often refuses to open inside another site.
There's no height setting. The page fills the widget, so drag the widget's bottom-right corner to make it bigger. You can add as many iFrame widgets as you like, each with its own page.
Who can add it
Administrators, Finance Managers, Project Collaborators, Project Managers and Portfolio Managers can add the widget, including external contacts with the Project Collaborator role. For anyone else it's locked in the library.
Your dashboard is your own, so a widget you add only appears for you. To share a report with your team, each person adds their own widget with the same address.
If the page doesn't load
- "This domain is not in your account's approved embed list. Contact your admin to add it." Ask an Administrator or Finance Manager to approve the domain. Check the exact domain in the address: www.example.com needs its own entry or a wildcard.
- "Only HTTPS URLs are allowed for security." Use the address that starts with https://.
- "URLs pointing to private or internal addresses are not allowed." Addresses on your own network, such as localhost, can't be embedded.
- The widget stays blank, or says the site refused to connect. The other site doesn't allow its pages to be shown inside other sites. Use its embed link. Some sites don't offer one.
- You see the other site's sign-in page. Sign in to that site: Avaza doesn't do it for you. If your browser doesn't keep you signed in there, use the tool's public embed option or open the page in its own tab.
Security and privacy
- The page loads straight from the other site into your browser, with that site's own sign-in and permissions. Avaza shares none of your data or sign-in details with it. From Avaza, the other site only learns your account's web address, as the site you came from.
- The page runs in a separate frame: it can't see or change the rest of your Avaza page, and it can't take you away from Avaza.
- Avaza checks the address when you save it and again each time the widget loads. Removing a domain from the approved list stops every widget that uses it.
- A public "publish to web" link can be opened by anyone who has it. For confidential reports, use an embed that asks people to sign in.
- The content comes from a third party. Avaza doesn't create or endorse it.