Insufficient Privileges errors might be caused by a lack of object and user permissions. You can troubleshoot this type of errors through a user’s profile and permission sets.
|Available in: Salesforce Classic|
|Available in: All Editions|
|To view profiles and permission sets:||“View Setup and Configuration”|
|To edit object permissions:||“Manage Profiles and Permission Sets”|
Generally, the best method for investigating object and permission access issues is through the API. However, you can use the following steps to investigate via point-and-click tools.
- Verify the object permissions in the user’s profile.
Object permissions, configured on profiles and permission sets, determine which objects a user can read, create, edit, or delete.
- On the user detail page, click the user’s profile.
- On the profile overview page, go to Object Settings or Object Permissions.
Note the permissions for the object. For example, if the user is trying to view an account, check that the “Read” permission for the account and contact objects on the user profile is enabled.
Or if the user is trying to run a report, he or she might not have “Read” permission on an object that the report references.
- Verify the user permissions in one of the following ways, depending on your profile user interface.
- From the enhanced profile user interface, review the permissions in the App Permissions and System Permissions sections.
- From the original profile user interface, review the permissions under Administrative Permissions and General User Permissions.
Note the relevant user permissions. For example, if the user is trying to send an email to a lead, check that the “Send Email” permission is enabled.
- Verify the permissions in the user’s permission sets.
- On the user detail page, scroll to the Permission Set Assignments related list and click each permission set.
- On the permission set overview page, click Object Settings and review the assigned object permissions.
- Review the user permissions in the App Permissions and System Permissions sections.
- Repeat these steps for each permission set assigned to the user.
- If needed, assign the necessary permission using a permission set or by updating the profile. Permission sets provide access on an individual basis. Assign permissions on the user profile only if all users of this profile require access. Be sure you're aware of your organization's security policy and take action accordingly.