If Users are unable to access a particular record or subset of records in a sandbox environment and are encountering an "insufficient Privileges" message, first ensure that they have appropriate access granted via security controls.
If the affected User(s) clearly have appropriate access, via the View/Modify all data permissions for example, and are encountering an "Insufficient Privileges" message upon attempting to access the data through the user interface, or are receiving an error message stating, "insufficient access rights on object id" upon attempting to modify or delete records via the API:
Check the system audit fields on the affected records by exporting the data from the sandbox environment or check them in production if you cannot view/export the data from sandbox.
Compare the created or last modified system audit field's date stamps to see if they correspond to the affected sandbox's refresh date. If they correlate to one another the unexpected behavior may be the result of the affected records being created or modified during the sandbox refresh process.
A sandbox is not a point-in-time snapshot of the exact state of your data. Furthermore, we recommend that you limit changes to your production organization while a sandbox is being created or refreshed. Setup and data changes to your production organization during the sandbox creation and refresh operations may result in inconsistencies in your sandbox. You might detect and correct some inconsistencies in your sandbox after it is copied or refreshed.
If this appears to be the scenario and the behavior is disrupting your business process and or testing log a case with Support. For efficient case handling includes the following information for our team's understanding of the impact and further investigation:
Be sure to include the organization ID for the affected sandbox which can be found by logging into the environment and navigating to:
In the Organization Detail section there is a Salesforce.com Organization ID field: which is your sandbox Salesforce org ID.
Provide the affected User's name and ensure that login access is established for Support. This can be set by navigating to:
Lastly, include links or Ids for the affected records and detailed steps users are taking up to the point where the messages are encountered.
000385757

We use three kinds of cookies on our websites: required, functional, and advertising. You can choose whether functional and advertising cookies apply. Click on the different cookie categories to find out more about each category and to change the default settings.
Privacy Statement
Required cookies are necessary for basic website functionality. Some examples include: session cookies needed to transmit the website, authentication cookies, and security cookies.
Functional cookies enhance functions, performance, and services on the website. Some examples include: cookies used to analyze site traffic, cookies used for market research, and cookies used to display advertising that is not directed to a particular individual.
Advertising cookies track activity across websites in order to understand a viewer’s interests, and direct them specific marketing. Some examples include: cookies used for remarketing, or interest-based advertising.