In Salesforce Lightning Experience and Salesforce Classic, an 'Insufficient Privileges' error appears when a user attempts to send an email or log an activity from a Case record. This error occurs when the Contact associated with the Case is not linked to an Account record.
When the Org Wide Default for Accounts is set to Public Read Only and Cases is set to Public Read/Write, a Contact that is not associated with any Account becomes a private record. Users other than the owner do not have Read access to that Contact, which causes the error when trying to interact with the Case.
To resolve this error, ensure the Contact associated with the Case is linked to an Account, or verify that the user has at least Read access to the Contact record.
Option 1: Associate the Contact with an Account
Navigate to the Contact record and add it to an Account. Once the Contact is associated with an Account, it is no longer treated as a private record, and users with access to the Case will be able to send emails and log activities.
Option 2: Grant the User Access to the Contact Record
Ensure the user has at least Read permission on the Contact object via their Profile or Permission Set.
Steps to Replicate this Scenario (for testing in Sandbox or Developer Org)
See also:
Edit Object Permissions in Profiles
Send Email Action Considerations for Cases
000387931

We use three kinds of cookies on our websites: required, functional, and advertising. You can choose whether functional and advertising cookies apply. Click on the different cookie categories to find out more about each category and to change the default settings.
Privacy Statement
Required cookies are necessary for basic website functionality. Some examples include: session cookies needed to transmit the website, authentication cookies, and security cookies.
Functional cookies enhance functions, performance, and services on the website. Some examples include: cookies used to analyze site traffic, cookies used for market research, and cookies used to display advertising that is not directed to a particular individual.
Advertising cookies track activity across websites in order to understand a viewer’s interests, and direct them specific marketing. Some examples include: cookies used for remarketing, or interest-based advertising.