At what point do you get the error in the Web UI?
Could it be that the web UI is trying to list all secrets engines, and receives a “Not authorized” because you don’t have permission for that?
(Just guessing here, but I’m going to try to reproduce it on my homelab Vault instance. Seems like a fun thing to tackle 
)