This article explains why Net Zero Cloud energy use record inserts fail with "INSUFFICIENT_ACCESS_ON_CROSS_REFERENCE_ENTITY: insufficient access rights on cross-reference id" for a subset of records and how to resolve it. The error is returned by the Composite API endpoint /services/data/vXX.X/composite/sobjects, by the Bulk API, by Data Loader, and by anonymous Apex when inserting VehicleAssetEnrgyUse [VehicleAssetEnrgyUse], StnryAssetEnrgyUse [StnryAssetEnrgyUse], or related Scope 3 energy use objects.
Customers describe this as "When ingesting certain records from the VehicleAssetEnrgyUse object, an INSUFFICIENT_ACCESS_ON_CROSS_REFERENCE_ENTITY error occurs, but the same data is ingested into other records without issue." and "the integration is failing for some Vehicle Asset Energy Use records with cross-reference access error even though the same records can be inserted via Postman".
The error indicates that the running user does not have Read sharing access to a parent record identified by an ID in the payload — typically VehicleAssetEmssnSrcId [VehicleAssetEmssnSrcId], StnryAssetEnvrSrcId [StnryAssetEnvrSrcId], a Fuel Type reference record (custom emissions factor), or a related carbon footprint record. Because the failure depends on per-record sharing of the referenced parent, the same payload structure can succeed for one row and fail for another, and tools that authenticate as a different user (such as a Postman session run as a System Administrator) appear to work while a middleware integration user fails.
Affects Net Zero Cloud on Enterprise, Performance, Unlimited, and Developer Editions in Lightning Experience.
Follow these steps in order. They apply to VehicleAssetEnrgyUse [VehicleAssetEnrgyUse], StnryAssetEnrgyUse [StnryAssetEnrgyUse], and other Net Zero Cloud energy use objects.
1. Inspect the failing payload. The required reference fields for StnryAssetEnrgyUse [StnryAssetEnrgyUse] are Name and StnryAssetEnvrSrcId [StnryAssetEnvrSrcId]. The required reference fields for VehicleAssetEnrgyUse [VehicleAssetEnrgyUse] are Name and VehicleAssetEmssnSrcId [VehicleAssetEmssnSrcId].
2. Add the missing reference IDs to every row in the integration payload. The IDs must be 18-character record IDs that exist in the target org and are accessible to the integration user.
Confirm the issue is resolved by re-running the original Composite API insert as the integration user against /services/data/v63.0/composite/sobjects with allOrNone=false and the same payload that previously failed, and confirming all VehicleAssetEnrgyUse [VehicleAssetEnrgyUse] or StnryAssetEnrgyUse [StnryAssetEnrgyUse] rows return success=true with no INSUFFICIENT_ACCESS_ON_CROSS_REFERENCE_ENTITY entries.
005385199

We use three kinds of cookies on our websites: required, functional, and advertising. You can choose whether functional and advertising cookies apply. Click on the different cookie categories to find out more about each category and to change the default settings.
Privacy Statement
Required cookies are necessary for basic website functionality. Some examples include: session cookies needed to transmit the website, authentication cookies, and security cookies.
Functional cookies enhance functions, performance, and services on the website. Some examples include: cookies used to analyze site traffic, cookies used for market research, and cookies used to display advertising that is not directed to a particular individual.
Advertising cookies track activity across websites in order to understand a viewer’s interests, and direct them specific marketing. Some examples include: cookies used for remarketing, or interest-based advertising.