> ## Documentation Index
> Fetch the complete documentation index at: https://docs.omni.co/llms.txt
> Use this file to discover all available pages before exploring further.

# Configuring security and access settings for embedded content

> Control security and access restrictions for embedded content

<Note>
  **Organization Admin** permissions are required to manage embed security settings.
</Note>

Embed security settings control where your embedded content can be displayed, how long embed sessions last, and what embed users can do within embedded content. These settings, accessed in **Settings > Embed > Admin**, apply to all embedded content in your organization.

<h2 id="session-length">
  Session length
</h2>

The **Session length** setting defines how long an embed session lasts. By default, using a valid embed URL creates an embed session that lasts 24 hours. See [Embed sessions](/embed/admin/sessions) for more information.

<h2 id="disable-right-click">
  Disable right-click in embedded presentations
</h2>

When enabled, right-click context menus are disabled in embedded presentations to prevent users from accessing browser developer tools or copying content.

<h2 id="user-credit-usage">
  Show AI credit usage on profile
</h2>

When enabled, embed users can see their monthly AI credit usage (and [their credit limit](/ai/settings/usage#user-level-credit-controls), if one is set) on their [profile page](/administration/users/your-account). See [Managing AI credit usage](/ai/settings/usage#user-level-credit-controls) for more information about user-level credit limits.

<h2 id="ancestors">
  Allowed Frame Ancestors
</h2>

Defines the domains where Omni embedded content renders, ensuring embedded content is only visible on domains within your control.

Separate domains by spaces or new lines. Each domain must be valid according to the frame ancestor specification. See the [MDN Frame Ancestors documentation](https://developer.mozilla.org/en-US/docs/Web/HTTP/Headers/Content-Security-Policy/frame-ancestors) for more information.

<CodeGroup>
  ```text One domain per line theme={null}
  omni.blobsrus.com
  *.blobsrus.com
  ```

  ```text Space-separated theme={null}
  omni.blobsrus.com *.blobsrus.com
  ```
</CodeGroup>