Four-Eyes Authorization Request Created

Sent when a user creates a four-eyes authorization request. For more information, see Four-Eyes Authorization.

General Information

Event ID: 42402

Event message details: <Operation> event has been initiated by <UserName> and requires an additional approval

Severity: Info

Parameters

Parameter Name	Description	Example
Operation	Name of the operation.	Operation="Disable four-eyes authorization"
OperationId	Operation ID. Possible values: 0 — Four-eyes authorization has been enabled 1 — Four-eyes authorization has been disabled 100 — Delete backup <Name> 101 — Delete log backup <Name> 102 — Delete configuration backup <Name> 103 — Disable four-eyes authorization 104 — Delete snapshot <Name> 105 — Delete object <Name> 106 — Delete service provider <Name> 107 — Delete storage <Name> 108 — Update Veeam Backup & Replication security settings 10000 — Other operations	OperationId="103"
InitiatorFullInfo	Detailed information about the user who initiated an operation. Includes the following data: fullName — the user name loginType	InitiatorFullInfo="<ModifiedUserInfo fullName="TECH\user1" loginType="0" />"
VbrHostName	Backup server name. Can be a DNS name, an FQDN or an IP address.	VbrHostName="vbrsrv01.tech.local"
VbrVersion	Veeam Backup & Replication version.	VbrVersion="12.3.1.1139"
Version	Event version (service parameter).	Version="1"
Description	Event message details.	Description="Disable four-eyes authorization event has been initiated by TECH\user1 and requires an additional approval."

Syslog Message Example

1 2025-03-24T05:26:37.421424-07:00 VBRSRV01 Veeam_MP - - [origin enterpriseId="31023"] [categoryId=0 instanceId=42402 Operation="Disable four-eyes authorization" OperationId="103" InitiatorFullInfo="<ModifiedUserInfo fullName="TECH\user1" loginType="0" />" VbrHostName="vbrsrv01.tech.local" VbrVersion="12.3.1.1139" Version="1" Description="Disable four-eyes authorization event has been initiated by TECH\user1 and requires an additional approval."]