INSUFFICIENT_ACCESS_OR_READONLY: insufficient access rights on object id

[Casey_Hayes]

Attempting to sync Marketo "Leads" to Salesforce Accounts. Receiving "INSUFFICIENT_ACCESS_OR_READONLY: insufficient access rights on object id" error message.

Marketo Sync user has profile that allows for Read, Create, Edit, Delete, and View All for Accounts and Contacts. (Same for Leads, except does not have "View All".)

When I log in as the Marketo Sync user, I can access the accounts, and edit them. (Some of the Edits fail due to required fields missing data.) However, a number of records have all the required information, and still fail to sync.

Note: Decent Salesforce experience, but very limited Marketo Admin experience, so not sure where to start.

[Dory_Viscoglio]

Anytime I see this error, it relates to a field that was changed on the SFDC side. My answer isn't super helpful, but I know our SFDC admin handles these issues when they arise -- there's nothing we can do or need to do in Marketo to resolve the issue. 

[Anonymous]

Hi

I am investigating the same type of error ... any improvemnt on this to resolve the issue ?

please let me know if you have any updates on this.

Regards
 

[Kenny_Elkington]

From a posting I made in this discussion: https://community.marketo.com/MarketoDiscussionDetail?id=90650000000PmVNAA0

It's likely that the Record Type ID is not a valid record type for the particular object which is being synched.  For example, if I assign a Lead record type to a Contact in MArketo, and then try to sync that, then the operation will fail because SFDC will not allow the Marketo to assign that record type to a contact.  The solution is to clear invalid record type IDs when a Lead is converted,  but still has a Lead Record Type ID.

Suppose I have a lead, and it has Record Type ID 'A'.  Then I convert this lead into a contact, but the Marketo-side record still has Record Type ID 'A'.  Since A is a record type for leads, the next time Marketo pushes an update to SFDC, it will also attempt to change the record type back to 'A' and this will cause SFDC to throw an error.  This is the typical case where an invalid record type will be assigned.  There are others but they are atypical and often unique.

There are many use cases for record types, so solutions are not universal, but one I recommend frequently is quite simple.  Set up a trigger campaign like so:

Smart List
Trigger - 'Lead is Converted'
(Filter - Record Type ID is not empty) not necessarily required

Flow
Change Data Value - Attribute is Record Type ID
New Value is 'Null' or 'Valid Record type for Contact'

This will clear invalid lead record types upon conversion and allow you contacts to sync normally.

[Anonymous]

Hi Kenny - I have 67 leads that are failing the Marketo/SFDC sync. The error message is "INSUFFICIENT_ACCESS_OR_READONLY: insufficient access rights on object id". I have read your post above and did some digging and what I find is Record Type ID (A) is empty for all the records.

The Record Type ID field does have an ID populated (012j0000000W7vlAAC). Are you saying to clear this field out?

Or perhaps I have a different sync issue going on?

[Kenny_Elkington]

That is very likely the issue, but I wouldn't be able to verify it directly.

[Anonymous]

What's interesting is these errors started the day support updated our sync to look for a SFDC custom flag "don't sync with marketo" to flush out records without an email. I'm going to contact support to see if they can help. Thanks guys for your help.

[Josh_Hill13]

Yes, I've seen this problem when leads are deleted in SFDC, but not in Marketo and the Record Type ID = Contact. Then the lead is synced back as "SFDC Lead" and it causes a sync error.

A good idea to set this up if Record Type ID is required on the SFDC side or there are validation rules for certain fields.

[dgamarnik]

Hey Kenny or Anyone Else,

I recently started seeing INSUFFICIENT_ACCESS_OR_READONLY: insufficient access rights on object id in my marketo instances. Wondering if you could help troubleshoot using the screenshot below. The SFDC type is contact.

Are you recommending that I clear out the values from the record type id field?

[Grégoire_Miche2]

Hi all,

We recently bumped into a series of these issues. access to record ID is one of the reasons, but not the only one possible :

• It can also be linked to any lookup field that which value points to record to which the Marketo user has no access
• It can be quite indirect, linked to process builder actions that try to access a record that the Marketo user is not entitled to access
• Stranger, the interface renders the same error if you try to set a SFDC picklist field to a value that is not in the record type you have selected

The case were you are trying to sync a SFDC contact or link that is no longer synchronizable (because of a "don't sync to marketo" field) returns another error code.

-Greg