When using reCAPTCHA to prevent spam Leads, you should enable Quick Create to prevent 'Insufficient Privileges' errors when creating a new API Key Pair.
Steps to reproduce:
In Classic:
1. Click Setup | Customize | Leads | Web-to-Lead | Create Web-to-Lead form
2. Click 'Include reCAPTCHA in HTML'
3. Click the reCAPTCHA API Key Pair lookup button.
4. Click New and then fill out the required fields.
5. Click Save.
In Lightning:
1. Click the Gear icon then Setup | Feature Settings | Marketing | Web to Lead | Create Web-to-Lead form
2. Click 'Include reCAPTCHA in HTML'
3. Click the reCAPTCHA API Key Pair lookup button.
4. Click New and then fill out the required fields.
5. Click Save.
You should then receive the 'Insufficient Privileges' error.
Note: This is working as designed
000383376

We use three kinds of cookies on our websites: required, functional, and advertising. You can choose whether functional and advertising cookies apply. Click on the different cookie categories to find out more about each category and to change the default settings.
Privacy Statement
Required cookies are necessary for basic website functionality. Some examples include: session cookies needed to transmit the website, authentication cookies, and security cookies.
Functional cookies enhance functions, performance, and services on the website. Some examples include: cookies used to analyze site traffic, cookies used for market research, and cookies used to display advertising that is not directed to a particular individual.
Advertising cookies track activity across websites in order to understand a viewer’s interests, and direct them specific marketing. Some examples include: cookies used for remarketing, or interest-based advertising.