User Authorization Denied

Sent when a user was not authorized.

General Information

Event ID: 44002

Event message details: Authorization request was denied: <Reason>

Severity: Warning

Parameters

Parameter Name	Description	Example
SourceIpAddress	Client IP address.	SourceIpAddress="198.51.100.15"
ClientId	Client ID.	ClientId="veeam-backup-web-ui"
FriendlyName	User name.	FriendlyName="veeamadmin"
Subject	User security identifier.	Subject="UID-veeamadmin"
ResourceId	Resource ID.	ResourceId="veeam-gateway-api-service"
RedirectUri	Redirect URI.	RedirectUri="/"
Reason	Reason to decline the operation. Possible values: -1 — Unknown reason 0 — Request is malformed 1 — Unauthenticated 2 — Account revalidation failed 3 — Password revalidation failed 4 — Client is unauthorized 5 — Resource owner is unauthorized 6 — Too many invalid requests 7 — MFA is required 8 — Unexpected server error occurred 9 — Selected cookie is missing 10 — SAML2 is disabled 11 — GSS is disabled	Reason="1"
VbrHostName	Backup server name. Can be a DNS name, an FQDN or an IP address.	VbrHostName="vbrsrv01.tech.local"
VbrVersion	Veeam Backup & Replication version.	VbrVersion="13.0.1.180"
Version	Event version (service parameter).	Version="1"
Description	Event message details.	Description="Authorization request was denied: an authentication has failed."

Syslog Message Example

1 2025-12-05T18:57:34.193602-07:00 VBRSRV01 Veeam_MP - - [origin enterpriseId="31023"] [categoryId=0 instanceId=44002 SourceIpAddress="198.51.100.15" ClientId="veeam-backup-web-ui" FriendlyName="veeamadmin" Subject="UID-veeamadmin" ResourceId="veeam-gateway-api-service" RedirectUri="/" VbrHostName="vbrsrv01" VbrVersion="13.0.1.180" Version="1" Description="Authorization request was denied: an authentication has failed."]