--- schema_version: "1" id: 8cc068c0a9d81db4409ac231270f19295f99e2f55044bb33de57f059a9f85d04 title: InsufficientAccessEventLog collection: legacydeveloper version: current locale: en-us portal_url: https://docs.salesforce.com/legacydeveloper/current/en-us/object_reference/sforce_api_objects_insufficientaccesseventlog.md canonical_url: https://developer.salesforce.com/docs/atlas.en-us.object_reference.meta/object_reference/sforce_api_objects_insufficientaccesseventlog.htm source_site: developer.salesforce.com content_type: documentation content_hash: cf6a21f2c905f8e57aedb169e959f44142403c751ade98450454c924e93312b9 description: Insufficient Access event logs contain details about errors relating to insufficient account, case, contact, and opportunity record access. This object is available in API version 61.0 and later. --- # InsufficientAccessEventLog Insufficient Access event logs contain details about errors relating to insufficient account, case, contact, and opportunity record access. This object is available in API version 61.0 and later. ![Note](https://developer.salesforce.com/docs/atlas.en-us.object_reference.meta/object_reference/images/icon_note.png) #### Note This object stores event data that's queryable from platform APIs. For event data stored in event log files, see [EventLogFile](https://developer.salesforce.com/docs/atlas.en-us.264.0.object_reference.meta/object_reference/sforce_api_objects_eventlogfile.htm). ![Note](https://developer.salesforce.com/docs/atlas.en-us.object_reference.meta/object_reference/images/icon_note.png) #### Note The Insufficient Access event type is disabled by default. You can enable this event type for a period of 24 hours by contacting Salesforce Customer Support. These insufficient access error scenarios are logged: - The user can’t share a case, contact, or opportunity because the user doesn’t have permission to share the parent account or the recipient of the share doesn’t currently have read access to the parent account. - The user can’t change ownership of a case, contact, or opportunity because the user doesn’t have permission to share the parent account or the new owner doesn’t currently have read access to the parent account. - The user can’t change the parent account of a case, contact, or opportunity because the user doesn’t have permission to share the new parent account or the owner of the case, contact, or opportunity doesn’t have read access to the new parent account. Insufficient access errors resulting from bulk operations involving two or more records aren’t logged. ## Supported Calls describeSObjects(), query() ## Special Access Rules To access this object, you must have the View Event Log Object Data user permission. ## Fields | Field | Details | | --- | --- | | AccessError | Type string Properties Filter, Group, Nillable, Sort Description The type of insufficient access error that the user received. Valid values are: - DATA\_NOT\_AVAILABLE—The record is no longer accessible. For example, a record was deleted and moved to the Recycle Bin. - INVALID\_TYPE—The record type doesn’t exist. - NO\_ACCESS—The user doesn’t have the required access level to complete the attempted action on the record. Example NO\_ACCESS | | ActualLoggedInUserIdentifier | Type string Properties Filter, Group, Nillable, Sort Description The ID of the user who initiated the action that caused the insufficient access error. For example, a user attempts to transfer ownership of a record to a teammate, but the operation fails because the teammate doesn’t have the required access. Example 005XXXXXXXXXXXX | | ErrorDescription | Type string Properties Filter, Group, Nillable, Sort Description Description of the insufficient access error that the user received. Example User 005XXXXXXXXXXXX doesn't have full access for the record 001XXXXXXXXXXXX. | | ObjectType | Type string Properties Filter, Group, Nillable, Sort Description The object for which the user received the insufficient access error. | | RecordIdentifier | Type string Properties Filter, Group, Nillable, Sort Description The ID of the record that the user doesn’t have access to. Example 001XXXXXXXXXXXX | | RequestIdentifier | Type string Properties Filter, Group, Nillable, Sort Description The unique ID of a single transaction. A transaction can contain one or more events. Example 3nWgxWbDKWWDIk0FKfF5DV | | RequestedAccessLevel | Type string Properties Filter, Group, Nillable, Sort Description The access level required by the user’s attempted action on the record. Valid values are: - DELETE - FULL - READ - TRANSFER - WRITE Example FULL | | Timestamp | Type dateTime Properties Filter, Nillable, Sort Description The access time of Salesforce services in GMT. Example 20130715233322.670 | | UserIdentifier | Type string Properties Filter, Group, Nillable, Sort Description The ID of the user for whom the insufficient access error occurred, either when the user couldn’t access a record, the user couldn’t complete an operation, or the user was the intended recipient of a record transfer that failed because the user didn’t have the required access. Example 005XXXXXXXXXXXX |