# Kibana embeded

**URL:** <https://discuss.elastic.co/t/kibana-embeded/282853>\
**Category:** Kibana\
**Created:** [August 30, 2021, 9:19pm UTC](https://discuss.elastic.co/t/kibana-embeded/282853 "2021-08-30T21:19:13Z")\
**Posts on this page:** 5\
**Page:** 1

<div class="post-metadata">

**Author:** ![sam3546](https://sea2.discourse-cdn.com/elastic/user_avatar/discuss.elastic.co/sam3546/32/79281_2.png) [@sam3546](https://discuss.elastic.co/u/sam3546)\
**Post date:** [August 30, 2021, 9:19pm UTC](https://discuss.elastic.co/t/kibana-embeded/282853/1 "2021-08-30T21:19:13Z")

</div>

I have a kibana instance embedded in an iframe for ease of use in an secondary application but everytime my users log in they get a popup saying "Unable to update the UI setting" "the server requires a client certificate".

The user can log in with their credentials (tied to an ldap realm) or with a pki but either method seems to give this popup. I have certificate authentication `ssl.client_authentication: optional` set to this for http and transport so the user should not have to provide a cert.

I do not get this message for native user accounts, only accounts authenticated via ldap, I also no longer get this message when in full screen on safari but does randomly come back again?

What am i missing?  
 ![Screenshot 2021-08-30 at 22.14.23](https://us1.discourse-cdn.com/elastic/original/3X/3/0/30e345e1582e285b597f1915724f280cea9fa645.png)

---

<div class="post-metadata">

**Author:** ![rashmi](https://sea2.discourse-cdn.com/elastic/user_avatar/discuss.elastic.co/rashmi/32/16391_2.png) [@rashmi](https://discuss.elastic.co/u/rashmi)\
**Post date:** [August 31, 2021, 5:12am UTC](https://discuss.elastic.co/t/kibana-embeded/282853/2 "2021-08-31T05:12:52Z")

</div>

cc @oleg might know more and will answer when he gets a chance.  
Thanks  
Rashmi

---

<div class="post-metadata">

**Author:** ![sam3546](https://sea2.discourse-cdn.com/elastic/user_avatar/discuss.elastic.co/sam3546/32/79281_2.png) [@sam3546](https://discuss.elastic.co/u/sam3546)\
**Post date:** [September 22, 2021, 7:56am UTC](https://discuss.elastic.co/t/kibana-embeded/282853/3 "2021-09-22T07:56:35Z")

</div>

I have since noticed in the console whenever loading the page i get

```auto
Failed to load resource: The server “localhost” requires a client certificate

```

For clarification i didn't mention in my first post on this issue incase it wasnt inferred, im testing locally running kibana and my ui on localhost different ports, so that's what the "localhost" is referring to.

---

<div class="post-metadata">

**Author:** ![sam3546](https://sea2.discourse-cdn.com/elastic/user_avatar/discuss.elastic.co/sam3546/32/79281_2.png) [@sam3546](https://discuss.elastic.co/u/sam3546)\
**Post date:** [September 22, 2021, 10:36am UTC](https://discuss.elastic.co/t/kibana-embeded/282853/4 "2021-09-22T10:36:57Z")

</div>

So i believe i've solved this, seems to be a combination of 2 things but based on permissions.

1. the default index needs to be set `"defaultIndex":{"userValue":"index"}` at `api/kibana/settings` but the role used by the users does not give them access. This can be solved by using a superuser to navigate to the dashboards page, its set and should not need to be done again unless kibana is redeployed.

2. Saved objects, the role didn't allow read on saved objects so would cause part of the error getting a `401 get/savedObjects` in the dev console. Giving users `"feature_saved_objects.read", "feature_savedObjectsManagement.read"` solves this issue, they can view all saved objects but not delete or modify.

While i dont like giving the role more permissions in 7.8 which i'm using there is no way of preventing the user access to stack management anyway, even if they can't modify anything they still shouldn't have access. This is allowed in newer version but we will not be upgrading.

Seems to solve both issues, enjoy.

---

<div class="post-metadata">

**Author:** ![system](https://us1.discourse-cdn.com/elastic/original/3X/1/a/1ac57faf039f6b580b3f104ef42a2a89e41014de.png) [@system](https://discuss.elastic.co/u/system)\
**Post date:** [October 20, 2021, 10:37am UTC](https://discuss.elastic.co/t/kibana-embeded/282853/5 "2021-10-20T10:37:12Z")

</div>

This topic was automatically closed 28 days after the last reply. New replies are no longer allowed.