Back in Spring ’16, Salesforce added a tool for assessing an org’s security – Setup > Security Controls > Health Check. I hadn’t had a reason to use it until recently. Despite having the standard System Administrator profile, I got the following error when trying to use it.

Insufficient Privileges

You do not have the level of access necessary to perform the operation you requested. Please contact the owner of the record or your administrator if access is necessary. For more information, see Insufficient Privileges Errors.

Click here to return to the previous page.

It took me a bit of Googling to figure out what was going on. According to the Security Implementation Guide;

USER PERMISSIONS
To view Health Check:
• “View Setup and Configuration” AND “Modify All Data”

Easy enough. My profile didn’t have those enabled so, I created a permission set, updated those two permissions, and assigned the set to my user.

No luck.

After yet a bit more searching, I noticed two permissions called “View Health Check” and “Manage Health Check”. Enabling those finally gave me access.

Hope this helps save you some head scratching.

Related Resources:

• Salesforce Spring ’16 Release notes – Security Health Check
• Security Health Check Documentation
• How is the Health Check score calculated?
• Salesforce Security Implementation Guide