Salesforce OmniStudio: "You do not have the level of access necessary to perform the operation" errors for non-admin users

Prerequisites

• Identify the affected user and the specific Permission Set(s) assigned to them.

• Confirm the exact object, field, or record type the OmniScript or DataMapper is attempting to read or write.

Tasks & Steps

Salesforce recommends granting access via Permission Sets rather than Profile edits. Diagnose which layer of access is missing from the list below, and apply the corresponding steps to the user's Permission Set.

Cause 1: Missing Object and Field Permissions If the user lacks object and field permissions for the records the DataMapper reads or writes:

1. Navigate to Setup > Permission Sets and open (or create) the permission set assigned to the affected users.

2. Click Object Settings, open each object referenced by the DataMapper/OmniScript (e.g., Contact, Quote), and set Object Permissions to Read=Enabled, Create=Enabled, and Edit=Enabled for every operation the component performs.

3. On the same Object Settings page, under Field Permissions, set Read Access=Enabled and Edit Access=Enabled for every field written by the component, including lookup fields (e.g., ContactId).

4. Click Save.

Cause 2: Missing Record Type Visibility If the user cannot see the record type used by the record being created or edited:

1. Within the applicable permission set, navigate to Object Settings > [Object] and scroll down to Record Types.

2. Set the required record type to Assigned=Enabled.

3. Click Save.

Cause 3: Missing OmniStudio Apex Class Access If the user lacks access to the OmniStudio Apex classes that run the component:

1. Within the permission set, navigate to Apex Class Access and click Edit.

2. Add the following classes to Enabled Apex Classes: omnistudio.IntegrationProcedureService, omnistudio.BusinessProcessDisplayController, and every custom Apex class invoked by Remote Actions in the affected OmniScripts or Integration Procedures.

3. Click Save.

4. Open the affected OmniScript in OmniStudio, click Deactivate Version, and then click Activate Version to force a re-compilation.

Cause 4: Missing Education Cloud Object Access for Community Users If a Community or Experience Cloud site user cannot access an Education Cloud object (e.g., AcademicCredential) or receives an "sObject type is not supported" error:

1. Confirm the object supports sharing for external users.

2. For shareable objects, grant access on the site's Guest User or member permission set via Setup > Permission Sets > Object Settings, setting Read=Enabled (and Create/Edit only if the object supports it).

3. If Object Settings does not list the object or returns "not supported," the object is not shareable to that license type. Assign the appropriate Education Cloud member permission set (e.g., Education Cloud Full Access) instead of a raw object grant.

Cause 5: Accessing an Archived Activity via Direct Link If the record is an archived Activity opened via a direct link (matches known issue KI-69806):

1. Access the archived activity through the Activity Timeline component on the parent record (Account or Contact) rather than the direct URL.

2. Alternatively, switch to Salesforce Classic by appending the record ID to your My Domain base URL (e.g., https://<yourdomain>[.my.salesforce.com/](https://.my.salesforce.com/)<recordId>) to view the record.