> ## Documentation Index
> Fetch the complete documentation index at: https://docs.runorion.com/llms.txt
> Use this file to discover all available pages before exploring further.

> ## Agent Instructions
> Orion is a collaborative analytics platform built by Gravity (bygravity.com). It connects to data warehouses, to Looker and dbt for existing business logic, and to a small set of external-context sources, and it lets teams ask questions in natural language to get shared analyses, dashboards, reports, and slide decks. The Connecting Data Sources page is the authoritative list of supported sources. When referencing Orion features, always link to the relevant documentation page. Orion is not open-source; it is a commercial SaaS product accessed at runorion.com.

# Portals

> Share Orion content with people outside your workspace

Portals let you share Orion content outside your workspace. Choose a public link, a protected link, or an embed according to who should be able to open it.

Use [dashboard sharing](/dashboards/publish) for people in your project. A portal gives external readers access to selected content without project membership.

> [!NOTE]
>
> Portals requires tenant administrator access and must be enabled for your
> workspace. You open it from **Portals** in the left-hand navigation menu.

![The left-hand navigation menu has Portals selected. The Portals screen shows a search field, Create portal, Public links, and a list of protected portals](https://mintcdn.com/gravity-8db392ea/MjK4MiqnUAyO2xxe/images/portals/portals-entry.webp?fit=max\&auto=format\&n=MjK4MiqnUAyO2xxe\&q=85\&s=224e1474f49f7b65d86eb298bcfbd61b)

## Choosing a Portal Type

Choose the sharing method according to who should be able to open the content.

| Kind | Choose it when | What readers need |
| - | - | - |
| **A public link** | Anyone receiving the URL may read the content | The link alone |
| **A protected link** | Readers must sign in or enter a shared password | Your SSO, or the password you give them |
| **An embed in their site** | Another site will display the content inside its own page | A token signed by that site's server |

![The New portal dialog offers A public link, A protected link, and An embed in their site. Each option explains its audience and access method](https://mintcdn.com/gravity-8db392ea/MjK4MiqnUAyO2xxe/images/portals/portals-sharing-method.webp?fit=max\&auto=format\&n=MjK4MiqnUAyO2xxe\&q=85\&s=7ad24bd702ae71111e1c88517ef46cff)

Choose SSO when access depends on each reader's identity. Configure your [SSO provider](/configuration/sso#portal-visitor-domains) first, then add rules for the people, domains, or groups you allow. A domain rule cannot admit someone your provider refuses.

Choose a shared password when readers will open the page directly. Password pages cannot be framed inside another site, so use an embed for that task.

## Publishing a Public Link

1. Select **Public links** in **Portals**, then click **Publish public link**
2. Click **Choose an artifact**, select the content, and set **Expires after**
3. Click **Publish**, then copy the link

![The public-link publishing form has Choose an artifact and Expires after controls, an explanation that anyone with the URL can read, and Cancel and Publish buttons](https://mintcdn.com/gravity-8db392ea/MjK4MiqnUAyO2xxe/images/portals/portals-public-link.webp?fit=max\&auto=format\&n=MjK4MiqnUAyO2xxe\&q=85\&s=9460dda4fbeca792518f3c8f01aca83d)

Anyone holding a public link can read the content, including anyone it was forwarded to.

## Creating a Protected Portal or Embed

For protected links and embeds, click **Create portal**, then work through the dialog:

1. Choose **A protected link** or **An embed in their site**
2. Name the portal after the audience it serves, such as a customer or a site
3. For an embed, add the origins allowed to frame it
4. Choose how a reader gets in, and for SSO add at least one rule saying who is allowed
5. Confirm

A new portal serves nothing until you add content and publish a link. For password access, set a password of at least twelve characters on **Access**. Until then, nobody can open it. Orion never shows the password again, so keep a copy to give your readers.

![The New portal dialog shows People sign in with your SSO and One shared password. The selected password option explains setup after creation and direct browser access](https://mintcdn.com/gravity-8db392ea/MjK4MiqnUAyO2xxe/images/portals/portals-protected-access.webp?fit=max\&auto=format\&n=MjK4MiqnUAyO2xxe\&q=85\&s=381d73c0e14634e82a6547b0e97a326b)

## Adding an Artifact and Publishing a Link

A protected portal or embed can serve dashboards, reports, and slide decks. Add the content first, then publish a link to it.

1. Open the portal and its **Artifacts** tab
2. Click **Add artifact**, then search by artifact or project name
3. Set **Link expiry**, then click **Publish link** on the artifact's row

The link appears under **Links**. Use **Copy** on its row to get the same URL again.

Readers see the current content. Editing or re-running it changes what everyone holding the link sees.

### Starting From the Artifact

On a project page, open the artifact's **...** actions menu and choose **Share externally**. With the artifact open, choose **More → Make Public** to open the same dialog.

![The P\&L slide deck's top bar shows Shared, Ask Orion, Download, and an expanded More menu with Make Public. Slide thumbnails sit beside an Executive Summary of monthly and year-to-date figures](https://mintcdn.com/gravity-8db392ea/MjK4MiqnUAyO2xxe/images/portals/portals-report-entry.webp?fit=max\&auto=format\&n=MjK4MiqnUAyO2xxe\&q=85\&s=e2e02b85f69b4d4f109cc80da9ed1d1c)

Use **Public link** to publish directly. Use **Protected** or **Embed in a site** to add the content to a portal you already created.

![The Share externally dialog has Public link, Protected, and Embed in a site tabs. Public link shows expiry, Copy link, Stop public access, and Create another link](https://mintcdn.com/gravity-8db392ea/MjK4MiqnUAyO2xxe/images/portals/portals-share-dialog.webp?fit=max\&auto=format\&n=MjK4MiqnUAyO2xxe\&q=85\&s=e228cb4d9eb4f95db16269cd15fc8b8f)

## Embedding in Another Site

An embed portal is framed inside a page you do not control, so it needs two things the other kinds do not.

* **Origins**: list the site origins allowed to frame the content, such as `https://acme.example`. Include any port, but no path
* **Signing keys**: **Create key** shows the key once. Keep it securely, because Orion cannot show it again

Open **Embed code** on a live link's row for setup checks and iframe, Node, and Python snippets. Give the other site's engineers those instructions. Their server signs a new token on each load, because Orion does not refresh expired tokens.

An allowed origin still needs a valid signed token. An origin outside your list cannot frame the content.

## Expiry, Revoking and Disabling

Choose an expiry before publishing. Use **Never** only for content intended to stay available indefinitely.

**Revoke** stops one URL immediately. Its row stays as history. **Disable** stops a whole portal, and **Enable** brings it back.

> [!WARNING]
>
> **Stop public access** revokes every portal link to that artifact, including
> protected and embed links. Deleting a portal stops every link under it. Use
> **Disable** when you expect to restore access later.

## What a Reader Sees

* **Public link**: the page opens, with no sign-in
* **Password**: a prompt headed "This page is password protected". The unlock covers that one link, so opening one page does not unlock the next you send
* **SSO**: a prompt headed "Sign in to open this page", with a button for each provider. A reader who signs in and matches no rule is told "You do not have access to this page"
* **Embed**: the artifact renders inside the other site's page
* **Revoked, expired, or under a disabled portal**: a page not found

![A public portal shows the P\&L slide deck's Executive Summary, with monthly figures, a year-to-date summary, and slide thumbnails. The header offers Download and slide navigation without project editing controls](https://mintcdn.com/gravity-8db392ea/MjK4MiqnUAyO2xxe/images/portals/portals-reader.webp?fit=max\&auto=format\&n=MjK4MiqnUAyO2xxe\&q=85\&s=1d981b35fda2d2e7910a7940d6543a2a)

## Who Can Use Portals

Only tenant administrators manage portals. Analysts and viewers cannot use **Portals** or **Share externally**. See [Groups](/configuration/groups#roles-at-a-glance) for workspace roles.

## Next Steps

> **[SSO](/configuration/sso)**
>
> Set up the provider and the portal visitor domains a protected link checks

> **[Publish and Share](/dashboards/publish)**
>
> Share a dashboard with teammates who do sign in to Orion


This documentation is built and hosted on [Mintlify](https://mintlify.com), a developer documentation platform.