Loading

Record triggered flow execution fails with the below error message, "Insufficient access rights on cross reference id" when logged in as a non-admin user

Veröffentlichungsdatum: May 6, 2026
Beschreibung

When a non-admin user attempts to create a Contact record in a Salesforce org where the User object's Sharing Settings are set to Private, the Record-Triggered Flow fails with the error: "Insufficient access rights on cross reference id."
The root cause is a permission issue at the database level. When the Contact record is created, the Record-Triggered Flow attempts to set the OwnerId on the record. Salesforce then performs a database access check to verify that the current user has permission to access the User record being assigned as the Owner. Because the User object's Sharing Settings are set to Private, users can only access their own User record — they do not have access to User records owned by others. This causes the access check to fail and the Flow execution to be rejected.

Lösung

Workaround

To resolve this issue, grant the non-admin user the Manage Internal Users permission.
This permission allows the user to access all internal User records, not just their own. When the Record-Triggered Flow sets the OwnerId on the new Contact, Salesforce performs a cross-reference access check on the target User record. Granting "Manage Internal Users" ensures the user passes this check, allowing the Flow to complete successfully.

Steps to Grant the Permission

  1. Navigate to Setup | Users | Permission Sets (or the user's Profile).
  2. Find or create a Permission Set that includes the Manage Internal Users system permission.
  3. Assign the Permission Set to the affected non-admin user.
  4. Ask the user to retry the Contact creation.
Nummer des Knowledge-Artikels

000391045

 
Laden
Salesforce Help | Article