# Jenkins HTTP Status 403-Forbidden Error **URL:** \ **Category:** Ask a question\ **Created:** [July 31, 2022, 10:30am UTC](https://community.jenkins.io/t/jenkins-http-status-403-forbidden-error/3214 "2022-07-31T10:30:13Z")\ **Posts on this page:** 11\ **Page:** 1
**Author:** ![degasuresh](https://avatars.discourse-cdn.com/v4/letter/d/898d66/32.png) [@degasuresh](https://community.jenkins.io/u/degasuresh)\ **Post date:** [July 31, 2022, 10:30am UTC](https://community.jenkins.io/t/jenkins-http-status-403-forbidden-error/3214/1 "2022-07-31T10:30:13Z")
Hi Team, I’m facing an issue with Jenkins while after adding users assign Global roles and Item roles and click save button i’m getting error HTTP Status 403-Forbidden error. Due to this error i’m unable to add new users and assign roles. Please help on this error. What is cause for this error…? How to fix this error. ---
**Author:** ![mawinter69](https://dub1.discourse-cdn.com/flex013/user_avatar/community.jenkins.io/mawinter69/32/1625_2.png) [@mawinter69](https://community.jenkins.io/u/mawinter69)\ **Post date:** [July 31, 2022, 3:25pm UTC](https://community.jenkins.io/t/jenkins-http-status-403-forbidden-error/3214/2 "2022-07-31T15:25:59Z")
seems you’re talking about role-strategy plugin. Are you by chance removing admin permissions for your own user? When this happens locally I get presented a login screen though. ---
**Author:** ![halkeye](https://dub1.discourse-cdn.com/flex013/user_avatar/community.jenkins.io/halkeye/32/8_2.png) [@halkeye](https://community.jenkins.io/u/halkeye)\ **Post date:** [July 31, 2022, 3:56pm UTC](https://community.jenkins.io/t/jenkins-http-status-403-forbidden-error/3214/3 "2022-07-31T15:56:15Z")
> [@degasuresh](#): > > Please help on this error. What is cause for this error…? How to fix this error. I recommend posting your logs (browser, Jenkins, whatever) cause all we can do is guess. Even reproduction steps would help. ---
**Author:** ![halkeye](https://dub1.discourse-cdn.com/flex013/user_avatar/community.jenkins.io/halkeye/32/8_2.png) [@halkeye](https://community.jenkins.io/u/halkeye)\ **Post date:** [August 1, 2022, 5:48am UTC](https://community.jenkins.io/t/jenkins-http-status-403-forbidden-error/3214/5 "2022-08-01T05:48:44Z")
I mean I asked for logs, and you gave me a screenshot of your browser. In this case, the “No valid crumb was included in the request” is often caused by the browser accessing jenkins from a different url from the one in your configuration screen (or config.xml) or you have your reverse proxy setup wrong. Its hard to say with no information. > **[Navigation in Jenkins fails with 'No valid crumb was included in request' errors](https://docs.cloudbees.com/docs/cloudbees-ci-kb/latest/client-and-managed-masters/instance-navigation-often-fails-with-crumb-issuer-errors)** > > Jenkins comes with a CSRF protection feature that is enabled by default. One of the security checks carried out by this feature is a strict IP check on the source of the incoming HTTP/S requests. It is based on the client IP of the request and the... ---
**Author:** ![degasuresh](https://avatars.discourse-cdn.com/v4/letter/d/898d66/32.png) [@degasuresh](https://community.jenkins.io/u/degasuresh)\ **Post date:** [August 1, 2022, 9:14am UTC](https://community.jenkins.io/t/jenkins-http-status-403-forbidden-error/3214/6 "2022-08-01T09:14:27Z")
Hi halkeye, Thanks for your reply. Yes i tried for share the logs and I checked in Tomcat Catalina logs same error message there also but I couldn’t able to share those logs due to access issue. Sorry for that. Note:- We don’t have configured any reverse proxy setup. Is there any plugins issue…? When i googled somebody saying that deprecated and old version of plugins cause of this error. Is that true…? Due to this error i couldn’t able to do any changes like(Adding new user in Item Role section, Global Role section.) ---
**Author:** ![halkeye](https://dub1.discourse-cdn.com/flex013/user_avatar/community.jenkins.io/halkeye/32/8_2.png) [@halkeye](https://community.jenkins.io/u/halkeye)\ **Post date:** [August 1, 2022, 11:30pm UTC](https://community.jenkins.io/t/jenkins-http-status-403-forbidden-error/3214/7 "2022-08-01T23:30:58Z")
> [@degasuresh](#): > > Is there any plugins issue…? When i googled somebody saying that deprecated and old version of plugins cause of this error. Is that true…? It absolutely could be be an issue. Especially after an upgrade of the controller. We always recommend upgrading. ---
**Author:** ![degasuresh](https://avatars.discourse-cdn.com/v4/letter/d/898d66/32.png) [@degasuresh](https://community.jenkins.io/u/degasuresh)\ **Post date:** [August 4, 2022, 6:55am UTC](https://community.jenkins.io/t/jenkins-http-status-403-forbidden-error/3214/8 "2022-08-04T06:55:34Z")
Hi @halkeye , We have upgraded controller(Jenkins version to latest version 2.346.2 and plugins also we have upgraded. But few plugins are showing still warning and deprecated.) Is this cause for this error “No valid crumb was included in the request”. Please suggest on this issue. The below plugins are showing warning:- Date Parameter Plugin 0.0.4 Extended Choice Parameter Plug-In 346.vd87693c5a 86c Dynamic Extended Choice Paramete Plug-In 1.0.1 Static Analysis Utilities 1.96 HTTP Request Plugin 1.16 ---
**Author:** ![halkeye](https://dub1.discourse-cdn.com/flex013/user_avatar/community.jenkins.io/halkeye/32/8_2.png) [@halkeye](https://community.jenkins.io/u/halkeye)\ **Post date:** [August 4, 2022, 3:26pm UTC](https://community.jenkins.io/t/jenkins-http-status-403-forbidden-error/3214/9 "2022-08-04T15:26:42Z")
I still recommend looking at your global configuration page and making sure your jenkins url matches the one in your browser. A mismatch usually generates the wrong cookies. ---
**Author:** ![bpedersen2](https://dub1.discourse-cdn.com/flex013/user_avatar/community.jenkins.io/bpedersen2/32/367_2.png) [@bpedersen2](https://community.jenkins.io/u/bpedersen2)\ **Post date:** [August 5, 2022, 7:31am UTC](https://community.jenkins.io/t/jenkins-http-status-403-forbidden-error/3214/11 "2022-08-05T07:31:14Z")
One thing: The CSRF cookie has a limited lifetime, so check if all (host, client) clocks are set correctly. It also can happen if you try to submit after the page has been open for too long. ---
**Author:** ![degasuresh](https://avatars.discourse-cdn.com/v4/letter/d/898d66/32.png) [@degasuresh](https://community.jenkins.io/u/degasuresh)\ **Post date:** [August 23, 2022, 10:16am UTC](https://community.jenkins.io/t/jenkins-http-status-403-forbidden-error/3214/13 "2022-08-23T10:16:04Z")
Hi @bpedersen2 , I have checked the options as you told but still I’m facing error:- No valid crumb was included in the request when i click save and apply button in Jenkins page. ---
**Author:** ![memm25ua](https://dub1.discourse-cdn.com/flex013/user_avatar/community.jenkins.io/memm25ua/32/6739_2.png) [@memm25ua](https://community.jenkins.io/u/memm25ua)\ **Post date:** [January 15, 2024, 8:11pm UTC](https://community.jenkins.io/t/jenkins-http-status-403-forbidden-error/3214/14 "2024-01-15T20:11:08Z")
For people with this problem trying to setup jenkins on a windows machine. If you are using wifi connection try changing to ethernet, this solved the issue for me.