---
title: "Recovery Token Deleted"
description: "Sent when a user deletes a recovery token. For more information, see Creating Recovery Tokens. Event ID: 36013 Event message details: Recovery token has been removed. <Details> Severity: Warning"
canonical: "https://helpcenter.veeam.com/docs/vbr/events/event_36013.html"
breadcrumb: "Event Reference > Plug-Ins for Enterprise Applications > Recovery Token Deleted"
dateModified: "2026-10-01"
---

# Recovery Token Deleted

Sent when a user deletes a recovery token. For more information, see [Creating Recovery Tokens](https://helpcenter.veeam.com/docs/backup/plugins/application_backups_recovery_token.html).

## General Information

**Event ID**: 36013

**Event message details**: Recovery token has been removed. `<Details>`

**Severity**: Warning

## Parameters

<table class="Blue_Table">
  <tr style="vertical-align:top">
    <th>
      <p>Parameter Name</p>
    </th>
    <th>
      <p>Description</p>
    </th>
    <th>
      <p>Example</p>
    </th>
  </tr>
  <tr style="vertical-align:top">
    <td>
      <p><span class="T_Filenames">TokenID</span></p>
    </td>
    <td>
      <p>Recovery token ID.</p>
    </td>
    <td>
      <p><span class="T_Filenames">TokenID="f58aa63d-b0fe-4b93-b89d-161a6f406a80"</span></p>
    </td>
  </tr>
  <tr style="vertical-align:top">
    <td>
      <p><span class="T_Filenames">RepoAccessGroupID</span></p>
    </td>
    <td>
      <p>Group ID with repository access permissions.</p>
    </td>
    <td>
      <p><span class="T_Filenames">RepoAccessGroupID="1bd5ee14-5947-483a-8c8f-49af909ce300"</span></p>
    </td>
  </tr>
  <tr style="vertical-align:top">
    <td>
      <p><span class="T_Filenames">InitiatorName</span></p>
    </td>
    <td>
      Name of the user who performed an operation.
    </td>
    <td>
      <p><span class="T_Filenames">InitiatorName="TECH\user1"</span></p>
    </td>
  </tr>
  <tr style="vertical-align:top">
    <td>
      <p><span class="T_Filenames">VbrHostName</span></p>
    </td>
    <td>
      Backup server name. Can be a DNS name, an FQDN or an IP address.
    </td>
    <td>
      <p><span class="T_Filenames">VbrHostName="vbrsrv01.tech.local"</span></p>
    </td>
  </tr>
  <tr style="vertical-align:top">
    <td>
      <p><span class="T_Filenames">VbrVersion</span></p>
    </td>
    <td>
      Veeam Backup & Replication version.
    </td>
    <td>
      <p><span class="T_Filenames">VbrVersion="13.1.0.411"</span></p>
    </td>
  </tr>
  <tr style="vertical-align:top">
    <td>
      <p><span class="T_Filenames">Version</span></p>
    </td>
    <td>
      Event version (service parameter).
    </td>
    <td>
      <p><span class="T_Filenames">Version="1"</span></p>
    </td>
  </tr>
  <tr style="vertical-align:top">
    <td>
      <p><span class="T_Filenames">Description</span></p>
    </td>
    <td>
      Event message details.
    </td>
    <td>
      <p><span class="T_Filenames">Description="Recovery token has been removed. Token ID: f58aa63d-b0fe-4b93-b89d-161a6f406a80, Access list: 1bd5ee14-5947-483a-8c8f-49af909ce300, Initiator: TECH\user1"</span></p>
    </td>
  </tr>
</table>

## Syslog Message Example

```
1 2026-07-25T10:15:52.803522+02:00 VBRSRV01 Veeam_MP - - [origin enterpriseId="31023"] [categoryId=0 instanceId=36013 TokenID="f58aa63d-b0fe-4b93-b89d-161a6f406a80" RepoAccessGroupID="1bd5ee14-5947-483a-8c8f-49af909ce300" InitiatorName="TECH\user1" VbrHostName="vbrsrv01.tech.local" VbrVersion="13.1.0.411" Version="1" Description="Recovery token has been removed. Token ID: f58aa63d-b0fe-4b93-b89d-161a6f406a80, Access list: 1bd5ee14-5947-483a-8c8f-49af909ce300, Initiator: TECH\user1"]
```