Frame ancestors
Control which parent origins may embed Groove Builder apps in an iframe (CSP frame-ancestors / related embed settings). Restrict this when embedding private apps into an existing portal.
Why control this
If arbitrary sites can frame your apps, users may be tricked by clickjacking or mistaken trust. Allow only known parent origins.