When you create or upsert an InsuranceQuote [vlocity_ins__InsuranceQuote__c] record in Salesforce Vlocity Insurance, the operation fails with:
"Insert failed. First exception on row 0; first error: CANNOT_INSERT_UPDATE_ACTIVATE_ENTITY, vlocity_ins.InsuranceQuote: execution of AfterInsert caused by: System.AuraHandledException: Script-thrown exception (System Code): []"
The same pattern also surfaces on the vlocity_ins.User AfterUpdate trigger and vlocity_ins.InsuranceApplication AfterInsert.
Root cause: After the OmniStudio security enforcement is enabled (settings AdvancedOmniStudioAccessCheck and ApexClassCheckForIP in OmniStudio Configuration, introduced in Spring '26), the InsuranceQuote trigger handler calls vlocity_ins.ApplicationUtilities.checkCustomSettingSecurity and vlocity_ins.CardCanvasController, which evaluate Read access to the Card Framework Configuration [vlocity_ins__CardFrameworkConfiguration__c] and Trigger Setup [vlocity_ins__TriggerSetup__c] Custom Setting Definitions. Users who lack access to these settings cause the trigger to throw an AuraHandledException, failing the entire DML operation.
Affected entry points:
Affected configuration:
Resolve the failure by granting the running user Read access to the two Vlocity Insurance Custom Setting Definitions referenced by the InsuranceQuote trigger handler.
Confirm the fix: Log in as an affected user (or as the Experience Cloud guest user) and re-run the original failing action — for example, create a new Quote from an Opportunity or re-run the OmniScript. The InsuranceQuote record must save without the CANNOT_INSERT_UPDATE_ACTIVATE_ENTITY error.
005385067

We use three kinds of cookies on our websites: required, functional, and advertising. You can choose whether functional and advertising cookies apply. Click on the different cookie categories to find out more about each category and to change the default settings.
Privacy Statement
Required cookies are necessary for basic website functionality. Some examples include: session cookies needed to transmit the website, authentication cookies, and security cookies.
Functional cookies enhance functions, performance, and services on the website. Some examples include: cookies used to analyze site traffic, cookies used for market research, and cookies used to display advertising that is not directed to a particular individual.
Advertising cookies track activity across websites in order to understand a viewer’s interests, and direct them specific marketing. Some examples include: cookies used for remarketing, or interest-based advertising.