Four-Eyes Authorization Disabled

Sent when a user disables four-eyes authorization. For more information, see Four-Eyes Authorization.

General Information

Event ID: 42401

Event message details: Four-eyes authorization has been disabled by <UserName>

Severity: Info

Parameters

Parameter Name

Description

Example

Operation

Name of the operation.

Operation="Four-eyes authorization has been disabled"

OperationId

Operation ID. Possible values:

  • 0 — Four-eyes authorization has been enabled
  • 1 — Four-eyes authorization has been disabled
  • 100 — Delete backup <Name>
  • 101 — Delete log backup <Name>
  • 102 — Delete configuration backup <Name>
  • 103 — Disable four-eyes authorization
  • 104 — Delete snapshot <Name>
  • 105 — Delete object <Name>
  • 106 — Delete service provider <Name>
  • 107 — Delete storage <Name>
  • 108 — Update Veeam Backup & Replication security settings
  • 10000 — Other operations

OperationId="1"

InitiatorFullInfo

Detailed information about the user who initiated an operation. Includes the following data:

  • fullName — the user name
  • loginType

InitiatorFullInfo="<ModifiedUserInfo fullName="TECH\user1" loginType="0" />"

VbrHostName

Backup server name. Can be a DNS name, an FQDN or an IP address.

VbrHostName="vbrsrv01.tech.local"

VbrVersion

Veeam Backup & Replication version.

VbrVersion="12.3.1.1139"

Version

Event version (service parameter).

Version="1"

Description

Event message details.

Description="Four-eyes authorization has been disabled by TECH\user1."

Syslog Message Example

1 2025-03-24T05:26:58.938788-07:00 VBRSRV01 Veeam_MP - - [origin enterpriseId="31023"] [categoryId=0 instanceId=42401 Operation="Four-eyes authorization has been disabled" OperationId="1" InitiatorFullInfo="<ModifiedUserInfo fullName="TECH\user1" loginType="0" />" VbrHostName="vbrsrv01.tech.local" VbrVersion="12.3.1.1139" Version="1" Description="Four-eyes authorization has been disabled by TECH\user1."]

Page updated 4/3/2025

Page content applies to build 12.3.1.1139