# Unable to execute POST request to Kibana

**URL:** <https://discuss.elastic.co/t/unable-to-execute-post-request-to-kibana/245992>\
**Category:** Kibana\
**Created:** [August 22, 2020, 4:54pm UTC](https://discuss.elastic.co/t/unable-to-execute-post-request-to-kibana/245992 "2020-08-22T16:54:10Z")\
**Posts on this page:** 1\
**Showing post:** 16

<div class="post-metadata">

**Author:** ![Larry\_Gregory](https://sea2.discourse-cdn.com/elastic/user_avatar/discuss.elastic.co/larry_gregory/32/34969_2.png) [@Larry\_Gregory](https://discuss.elastic.co/u/Larry_Gregory)\
**Post date:** [September 1, 2020, 12:25pm UTC](https://discuss.elastic.co/t/unable-to-execute-post-request-to-kibana/245992/16 "2020-09-01T12:25:40Z")

</div>

Hey @peternijem,

Sorry you're having a hard time with cross-origin requests to Kibana.

I see in the HAR file that you're making a request to `POST http://10.100.0.207:5604/_security/user/peteruser`.

Is this your Kibana endpoint? If so, the API to create a user in 7.5 is `/api/security/v1/users/{username}` ([source link](https://github.com/elastic/kibana/blob/956aeb1cee1aea3ab618951c5cdd68e862ff8d18/x-pack/legacy/plugins/security/server/routes/api/v1/users.js#L48)).

I also see a request to `http://10.100.0.207:5604/api/features`, which is returning a `404`. Do you have security enabled for Kibana? If so, what user are you authenticating with? If the user does not have sufficient privileges (effectively the `kibana_user` role), then this endpoint can return a `404`.

* * *

I know you tried a lot of config combinations. Does the following help any?

```auto
server.cors: true
# do not set server.cors.origin

server.xsrf.disableProtection: true

```

---

_[View the full topic](https://discuss.elastic.co/t/unable-to-execute-post-request-to-kibana/245992)._