# Step 6: Lock it down

> For the complete documentation index, see [llms.txt](https://developers.thoughtspot.com/docs/llms.txt)

Source: https://developers.thoughtspot.com/docs/tutorials/embed-data-driven-app/step-06

# Step 6: Lock it down

Hosts aren’t ThoughtSpot power users, and you don’t want them downloading raw exports or seeing sharing options that don’t map to anything in your portal.

```javascript
import {
  LiveboardEmbed,
  Action, // (1)
} from '@thoughtspot/visual-embed-sdk';

const liveboardEmbed = new LiveboardEmbed(container, {
  frameParams: { width: '100%', height: '100%' },
  liveboardId: 'YOUR_LIVEBOARD_GUID',
  hiddenActions: [Action.Download, Action.Share],
  disabledActions: [Action.SpotIQAnalyze],
  disabledActionReason: 'Not available on SpotStay accounts — contact IT to enable.',
});
```

1.  `Action` must be imported from the SDK.
    

`disabledActions` keeps the action visible but greyed out, with `disabledActionReason` as the tooltip explaining why. `hiddenActions` removes the action from the UI entirely. The full list of targetable actions is in the [Action enum reference]({{navprefix}}/{{Action}}). Worth a skim before deciding what to hide vs disable, since the two send very different signals to the end-user.

[← Previous]({{navprefix}}/tutorials/embed-data-driven-app/step-05) [Next →]({{navprefix}}/tutorials/embed-data-driven-app/troubleshooting)