---
title: "User or Group Deleted"
description: "Sent when a user deletes a user or a user group. For more information, see Configuring Users. Event ID: 31400 Event message details: User or group <UserName> | <GroupName> has been deleted Severity: Warning"
canonical: "https://helpcenter.veeam.com/docs/vbr/events/event_31400.html"
breadcrumb: "Event Reference > Users > User or Group Deleted"
dateModified: "2026-10-01"
---

# User or Group Deleted

Sent when a user deletes a user or a user group. For more information, see [Configuring Users](https://helpcenter.veeam.com/docs/backup/vsphere/configuring_users.html).

## General Information

**Event ID**: 31400

**Event message details**: User or group `<UserName>` | `<GroupName>` has been deleted

**Severity**: Warning

## Parameters

<table class="Blue_Table">
  <tr style="vertical-align:top">
    <th>
      <p>Parameter Name</p>
    </th>
    <th>
      <p>Description</p>
    </th>
    <th>
      <p>Example</p>
    </th>
  </tr>
  <tr style="vertical-align:top">
    <td>
      <p><span class="T_Filenames">ID</span></p>
    </td>
    <td>
      <p>User ID or group ID.</p>
    </td>
    <td>
      <p><span class="T_Filenames">ID="94ef735b-c211-4734-8cf8-70bf175491ae"</span></p>
    </td>
  </tr>
  <tr style="vertical-align:top">
    <td>
      <p><span class="T_Filenames">Name</span></p>
    </td>
    <td>
      <p>User name or group name.</p>
    </td>
    <td>
      <p><span class="T_Filenames">Name="TECH\user2"</span></p>
    </td>
  </tr>
  <tr style="vertical-align:top">
    <td>
      <p><span class="T_Filenames">ChangesXML</span></p>
    </td>
    <td>
      Updated data in the XML format.
    </td>
    <td>
      <p><span class="T_Filenames">ChangesXML="&lt;changes&gt;&lt;object id="94ef735b-c211-4734-8cf8-70bf175491ae" name="TECH\user2" assignedRoleName="Veeam Backup Viewer" /&gt;&lt;/changes&gt;"</span></p>
    </td>
  </tr>
  <tr style="vertical-align:top">
    <td>
      <p><span class="T_Filenames">UserName</span></p>
    </td>
    <td>
      Name of the user who performed an operation.
    </td>
    <td>
      <p><span class="T_Filenames">UserName="TECH\user1"</span></p>
    </td>
  </tr>
  <tr style="vertical-align:top">
    <td>
      <p><span class="T_Filenames">UserFullInfo</span></p>
    </td>
    <td>
      <p>Detailed information about the user who performed an operation. Includes the following data:</p>
      <ul>
      <li><code>fullName</code> — the user name</li>
      <li><code>loginType</code></li>
      </ul>
    </td>
    <td>
      <p><span class="T_Filenames">UserFullInfo="&lt;ModifiedUserInfo fullName="TECH\user1" loginType="0" /&gt;"</span></p>
    </td>
  </tr>
  <tr style="vertical-align:top">
    <td>
      <p><span class="T_Filenames">VbrHostName</span></p>
    </td>
    <td>
      Backup server name. Can be a DNS name, an FQDN or an IP address.
    </td>
    <td>
      <p><span class="T_Filenames">VbrHostName="vbrsrv01.tech.local"</span></p>
    </td>
  </tr>
  <tr style="vertical-align:top">
    <td>
      <p><span class="T_Filenames">VbrVersion</span></p>
    </td>
    <td>
      Veeam Backup & Replication version.
    </td>
    <td>
      <p><span class="T_Filenames">VbrVersion="13.1.0.411"</span></p>
    </td>
  </tr>
  <tr style="vertical-align:top">
    <td>
      <p><span class="T_Filenames">Version</span></p>
    </td>
    <td>
      Event version (service parameter).
    </td>
    <td>
      <p><span class="T_Filenames">Version="1"</span></p>
    </td>
  </tr>
  <tr style="vertical-align:top">
    <td>
      <p><span class="T_Filenames">Description</span></p>
    </td>
    <td>
      Event message details.
    </td>
    <td>
      <p><span class="T_Filenames">Description="User or group TECH\user2 has been deleted."</span></p>
    </td>
  </tr>
</table>

## Syslog Message Example

```
1 2026-07-25T08:49:10.238346-07:00 VBRSRV01 Veeam_MP - - [origin enterpriseId="31023"] [categoryId=0 instanceId=31400 ID="94ef735b-c211-4734-8cf8-70bf175491ae" Name="TECH\user2" ChangesXML="<changes><object id="94ef735b-c211-4734-8cf8-70bf175491ae" name="TECH\user2" assignedRoleName="Veeam Backup Viewer" /></changes>" UserName="TECH\user1" UserFullInfo="<ModifiedUserInfo fullName="TECH\user1" loginType="0" />" VbrHostName="vbrsrv01.tech.local" VbrVersion="13.1.0.411" Version="1" Description="User or group TECH\user2 has been deleted."]
```