Note: This release is in preview. Features described here don’t become generally available until the latest general availability date that Salesforce announces for this release. Before then, and where features are noted as beta, pilot, or developer preview, we can’t guarantee general availability within any particular time frame or at all. Make your purchase decisions only on the basis of generally available products and features.

InsufficientAccessEventLog

Insufficient Access event logs contain details about errors relating to insufficient account, case, contact, and opportunity record access. This object is available in API version 61.0 and later.

This object stores event data that's queryable from platform APIs. For event data stored in event log files, see EventLogFile.

Note

The Insufficient Access event type is disabled by default. You can enable this event type for a period of 24 hours by contacting Salesforce Customer Support.

Note

These insufficient access error scenarios are logged:

The user can’t share a case, contact, or opportunity because the user doesn’t have permission to share the parent account or the recipient of the share doesn’t currently have read access to the parent account.
The user can’t change ownership of a case, contact, or opportunity because the user doesn’t have permission to share the parent account or the new owner doesn’t currently have read access to the parent account.
The user can’t change the parent account of a case, contact, or opportunity because the user doesn’t have permission to share the new parent account or the owner of the case, contact, or opportunity doesn’t have read access to the new parent account.

Insufficient access errors resulting from bulk operations involving two or more records aren’t logged.

Supported Calls

describeSObjects(), query()

Special Access Rules

To access this object, you must have the View Event Log Object Data user permission.

Fields

Field	Details
AccessError	Type string Properties Filter, Group, Nillable, Sort Description The type of insufficient access error that the user received. Valid values are: `DATA_NOT_AVAILABLE`—The record is no longer accessible. For example, a record was deleted and moved to the Recycle Bin. `INVALID_TYPE`—The record type doesn’t exist. `NO_ACCESS`—The user doesn’t have the required access level to complete the attempted action on the record. Example `NO_ACCESS`
ActualLoggedInUserIdentifier	Type string Properties Filter, Group, Nillable, Sort Description The ID of the user who initiated the action that caused the insufficient access error. For example, a user attempts to transfer ownership of a record to a teammate, but the operation fails because the teammate doesn’t have the required access. Example `005XXXXXXXXXXXX`
ErrorDescription	Type string Properties Filter, Group, Nillable, Sort Description Description of the insufficient access error that the user received. Example User 005XXXXXXXXXXXX doesn't have full access for the record 001XXXXXXXXXXXX.
ObjectType	Type string Properties Filter, Group, Nillable, Sort Description The object for which the user received the insufficient access error.
RecordIdentifier	Type string Properties Filter, Group, Nillable, Sort Description The ID of the record that the user doesn’t have access to. Example `001XXXXXXXXXXXX`
RequestIdentifier	Type string Properties Filter, Group, Nillable, Sort Description The unique ID of a single transaction. A transaction can contain one or more events. Example `3nWgxWbDKWWDIk0FKfF5DV`
RequestedAccessLevel	Type string Properties Filter, Group, Nillable, Sort Description The access level required by the user’s attempted action on the record. Valid values are: `DELETE` `FULL` `READ` `TRANSFER` `WRITE` Example `FULL`
Timestamp	Type dateTime Properties Filter, Nillable, Sort Description The access time of Salesforce services in GMT. Example `20130715233322.670`
UserIdentifier	Type string Properties Filter, Group, Nillable, Sort Description The ID of the user for whom the insufficient access error occurred, either when the user couldn’t access a record, the user couldn’t complete an operation, or the user was the intended recipient of a record transfer that failed because the user didn’t have the required access. Example `005XXXXXXXXXXXX`

Object Reference for the Salesforce Platform

InsufficientAccessEventLog

Supported Calls

Special Access Rules

Fields