When a user attempts to access Setup, My Profile, or My Settings, they may receive an 'Insufficient Privileges' error message.
This error occurs when the Api Only User system permission is enabled in either the user's Profile or a Permission Set assigned to the user. The Api Only User permission is intended for integration users that access Salesforce exclusively through the API. Users with this permission cannot access the Salesforce user interface (UI).
If this permission is assigned to a regular Salesforce user who requires UI access, they will encounter an 'Insufficient Privileges' error when attempting to access Setup, My Profile, or My Settings
To resolve this issue, disable the Api Only User permission. First, check whether the permission is enabled in the user's Profile. If it is not enabled at the Profile level, review the user's assigned Permission Sets.
Navigate to the affected user's User Detail page.
Click the profile name in the Profile field.
Select System Permissions.
Locate Api Only User under the Permission Name column.
If the permission is enabled, click Edit and clear the checkbox.
Click Save.
Note: If the permission is not enabled in the Profile, continue with the Permission Set review steps below.
Navigate to the affected user's User Detail page.
In the Permission Set Assignments related list, open an assigned Permission Set.
Select System Permissions.
Locate Api Only User under the Permission Name column.
If the permission is enabled, click Edit and clear the checkbox.
Click Save.
If the permission is not enabled, repeat these steps for the remaining assigned Permission Sets until you identify the Permission Set that contains the setting.
When an administrator uses the Log In As feature to access the affected user's account, the "Insufficient Privileges" error does not appear.
This behavior is expected because the Log In As feature bypasses the Api Only User restriction. To verify the issue and confirm the resolution, always have the affected user log in directly.
If the issue persists after reviewing both the user's Profile and assigned Permission Sets, contact Salesforce Support.
API Only Access - Salesforce Help
000386308

We use three kinds of cookies on our websites: required, functional, and advertising. You can choose whether functional and advertising cookies apply. Click on the different cookie categories to find out more about each category and to change the default settings.
Privacy Statement
Required cookies are necessary for basic website functionality. Some examples include: session cookies needed to transmit the website, authentication cookies, and security cookies.
Functional cookies enhance functions, performance, and services on the website. Some examples include: cookies used to analyze site traffic, cookies used for market research, and cookies used to display advertising that is not directed to a particular individual.
Advertising cookies track activity across websites in order to understand a viewer’s interests, and direct them specific marketing. Some examples include: cookies used for remarketing, or interest-based advertising.