---
title: "Four-Eyes Authorization Request Expired"
description: "Sent when a four-eyes authorization request is expired. For more information, see Four-Eyes Authorization. Event ID: 42405 Event message details: <Operation> event initiated by <UserName> has expired while waiting for additional approval and was..."
canonical: "https://helpcenter.veeam.com/docs/vbr/events/event_42405.html"
breadcrumb: "Event Reference > Users > Four-Eyes Authorization Request Expired"
dateModified: "2026-10-01"
---

# Four-Eyes Authorization Request Expired

Sent when a four-eyes authorization request is expired. For more information, see [Four-Eyes Authorization](https://helpcenter.veeam.com/docs/backup/vsphere/four_eyes_authorization.html).

## General Information

**Event ID**: 42405

**Event message details**: `<Operation>` event initiated by `<UserName>` has expired while waiting for additional approval and was auto-rejected

**Severity**: Info

## Parameters

<table class="Blue_Table">
  <tr style="vertical-align:top">
    <th>
      <p>Parameter Name</p>
    </th>
    <th>
      <p>Description</p>
    </th>
    <th>
      <p>Example</p>
    </th>
  </tr>
  <tr style="vertical-align:top">
    <td>
      <p><span class="T_Filenames">Operation</span></p>
    </td>
    <td>
      <p>Name of the operation.</p>
    </td>
    <td>
      <p><span class="T_Filenames">Operation="Delete backup VM01"</span></p>
    </td>
  </tr>
  <tr style="vertical-align:top">
    <td>
      <p><span class="T_Filenames">OperationId</span></p>
    </td>
    <td>
      <p>Operation ID. Possible values:</p>
      <ul>
      <li><code>0</code> — Four-eyes authorization has been enabled</li>
      <li><code>1</code> — Four-eyes authorization has been disabled</li>
      <li><code>100</code> — Delete backup <code>&lt;Name&gt;</code></li>
      <li><code>101</code> — Delete log backup <code>&lt;Name&gt;</code></li>
      <li><code>102</code> — Delete configuration backup <code>&lt;Name&gt;</code></li>
      <li><code>103</code> — Disable four-eyes authorization</li>
      <li><code>104</code> — Delete snapshot <code>&lt;Name&gt;</code></li>
      <li><code>105</code> — Delete object <code>&lt;Name&gt;</code></li>
      <li><code>106</code> — Delete service provider <code>&lt;Name&gt;</code></li>
      <li><code>107</code> — Delete storage <code>&lt;Name&gt;</code></li>
      <li><code>108</code> — Update Veeam Backup & Replication security settings</li>
      <li><code>109</code> — Update repository <code>&lt;Name&gt;</code></li>
      <li><code>10000</code> — Other operations</li>
      </ul>
    </td>
    <td>
      <p><span class="T_Filenames">OperationId="100"</span></p>
    </td>
  </tr>
  <tr style="vertical-align:top">
    <td>
      <p><span class="T_Filenames">InitiatorFullInfo</span></p>
    </td>
    <td>
      <p>Detailed information about the user who initiated an operation. Includes the following data:</p>
      <ul>
        <li class="Table_List"><span class="T_Filenames">fullName</span> — the user name</li>
        <li class="Table_List"><span class="T_Filenames">loginType</span></li>
      </ul>
    </td>
    <td>
      <p><span class="T_Filenames">InitiatorFullInfo="&lt;ModifiedUserInfo fullName="TECH\user1" loginType="0" /&gt;"</span></p>
    </td>
  </tr>
  <tr style="vertical-align:top">
    <td>
      <p><span class="T_Filenames">VbrHostName</span></p>
    </td>
    <td>
      Backup server name. Can be a DNS name, an FQDN or an IP address.
    </td>
    <td>
      <p><span class="T_Filenames">VbrHostName="vbrsrv01.tech.local"</span></p>
    </td>
  </tr>
  <tr style="vertical-align:top">
    <td>
      <p><span class="T_Filenames">VbrVersion</span></p>
    </td>
    <td>
      Veeam Backup & Replication version.
    </td>
    <td>
      <p><span class="T_Filenames">VbrVersion="13.1.0.411"</span></p>
    </td>
  </tr>
  <tr style="vertical-align:top">
    <td>
      <p><span class="T_Filenames">Version</span></p>
    </td>
    <td>
      Event version (service parameter).
    </td>
    <td>
      <p><span class="T_Filenames">Version="1"</span></p>
    </td>
  </tr>
  <tr style="vertical-align:top">
    <td>
      <p><span class="T_Filenames">Description</span></p>
    </td>
    <td>
      Event message details.
    </td>
    <td>
      <p><span class="T_Filenames">Description="Delete backup VM01 event initiated by TECH\user1 has expired while waiting for additional approval and was auto-rejected."</span></p>
    </td>
  </tr>
</table>

## Syslog Message Example

```
1 2026-07-25T02:18:33.762068-07:00 VBRSRV01 Veeam_MP - - [origin enterpriseId="31023"] [categoryId=0 instanceId=42405 Operation="Delete backup VM01" OperationId="100" InitiatorFullInfo="<ModifiedUserInfo fullName="TECH\user1" loginType="0" />" VbrHostName="vbrsrv01.tech.local" VbrVersion="13.1.0.411" Version="1" Description="Delete backup VM01 event initiated by TECH\user1 has expired while waiting for additional approval and was auto-rejected."]
```