Configure Datasource Allowlist Settings

Overview

The process for updating data source allowlist settings differs between Cloud and Data Center. This document outlines these differences and how to configure them.

• Cloud: Managed through Appfire’s Jira configuration screen.

• Data Center: Managed through the platform Atlassian.

Cloud

The Allowlist must be configured in the Global Settings section of Dashboard Hub. To configure, follow these steps:

1. Select the More dropdown.

2. Click Apps.

3. Click manage apps.

4. Navigate to Dashboard Hub's left sidebar and click Global Settings.

5. Under Datasource Restrictions, you can choose Allowlist.

    

   Open

   

    

Restriction Type

Three different restrictions can be set:

Disabled - Data can be retrieved from any source with no restrictions.

• Data can be retrieved from any source without limitations; no restrictions are enforced on where the data comes from.

• This is recommended for environments where external integrations are required.

Do not allow external data sources - only restrict data retrieval to this instance.

• Restricts data retrieval to the current Jira or Confluence instance only. Thus, external data sources are entirely blocked, ensuring that all queries and reports use internal data only.

• Recommended for high-security environments where external data access is not permitted.

Allowlist - Only allows data from data sources with domains explicitly listed here.

• Only allows data retrieval from explicitly approved domains. Thus, Users must manually specify allowed domains to ensure secure connections.

• Recommended for controlled access scenarios, only trusted external data sources should be used.

Data Center

Dashboard Hub delegates the configuration on the Atlassian platform configuration: Configuring the allowlist | Administering Jira applications Data Center 10.5 | Atlassian Documentation

To configure the Allowlist in the Data Center, follow these steps:

1. From the top navigation bar, select Administration  > System. 

2.  Select Allowlist.

3. Enter the URL or expression you want to allow.

4. Choose the Type of expression (see Expression Types below for examples).

5. Choose Allow Incoming if you need to allow CORS requests. See Configuring the allowlist for more details).

6. Choose Allow anonymous users if you need to allow unauthenticated users.

7. Choose Add. Your URL or expression appears in the allowlist.

To test that your allowed listed URL works as expected, you can enter a URL in the Test a URL field. Icons will indicate whether incoming or outgoing traffic is allowed for that URL.