INSUFFICIENT_ACCESS_OR_READONLY

The user has no right to perform this operation on the record itself.

Common causes

• The profile lacks Create, Edit or Delete on the object.
• Org-wide defaults are Private or Read Only and nothing shares the record with edit access.
• The user is changing ownership without the Transfer Record permission.
• An Experience Cloud or guest user is restricted by external sharing settings.

How to fix

• Check object permissions on the user’s profile and permission sets.
• Check record access: open the record, use Sharing, and review why the user does or does not have access.
• Grant the missing permission through a permission set rather than editing the profile.
• For automation, consider running in system context.