Loading
시스템 관리자에 대한 피싱 방지 MFA 및 전 직원사용자 MFA 적용 안내 더 많이 읽기

Record triggered flow execution fails with the below error message, "Insufficient access rights on cross reference id" when logged in as a non-admin user

게시 일자: May 6, 2026
상세 설명

When a non-admin user attempts to create a Contact record in a Salesforce org where the User object's Sharing Settings are set to Private, the Record-Triggered Flow fails with the error: "Insufficient access rights on cross reference id."
The root cause is a permission issue at the database level. When the Contact record is created, the Record-Triggered Flow attempts to set the OwnerId on the record. Salesforce then performs a database access check to verify that the current user has permission to access the User record being assigned as the Owner. Because the User object's Sharing Settings are set to Private, users can only access their own User record — they do not have access to User records owned by others. This causes the access check to fail and the Flow execution to be rejected.

솔루션

Workaround

To resolve this issue, grant the non-admin user the Manage Internal Users permission.
This permission allows the user to access all internal User records, not just their own. When the Record-Triggered Flow sets the OwnerId on the new Contact, Salesforce performs a cross-reference access check on the target User record. Granting "Manage Internal Users" ensures the user passes this check, allowing the Flow to complete successfully.

Steps to Grant the Permission

  1. Navigate to Setup | Users | Permission Sets (or the user's Profile).
  2. Find or create a Permission Set that includes the Manage Internal Users system permission.
  3. Assign the Permission Set to the affected non-admin user.
  4. Ask the user to retry the Contact creation.
Knowledge 기사 번호

000391045

 
로드 중
Salesforce Help | Article