---
title: "Restore Status Changed"
description: "Sent when a restore execution starts, is aborted, or finishes with a success, warning or failure result. Event ID: vdc.workload_v0.tenant_v0.restore.execution_v0.lifecycle_v0 Event message details: Sent with data.lifecycle.status set to STARTED..."
canonical: "https://helpcenter.veeam.com/docs/vdc/events/vdc_events_restore_status_changed.html"
breadcrumb: "Event Reference > Restore Policy Execution > Restore Status Changed"
dateModified: "2026-11-02"
---

# Restore Status Changed

Sent when a restore execution starts, is aborted, or finishes with a success, warning or failure result.

## General Information

**Event ID**: `vdc.workload_v0.tenant_v0.restore.execution_v0.lifecycle_v0`

**Event message details**: Sent with `data.lifecycle.status` set to `STARTED`, `SUCCESS`, `WARNING`, `ABORTED` or `FAILED`.

**Severity**: Varies depending on `data.lifecycle.status`.

<table class="Blue_Table">
  <tr style="vertical-align:top">
    <th>
      <p>data.lifecycle.status</p>
    </th>
    <th>
      <p>Severity</p>
    </th>
  </tr>
  <tr style="vertical-align:top">
    <td>
      <p><span class="T_Filenames">STARTED</span></p>
    </td>
    <td>
      <p>Info</p>
    </td>
  </tr>
  <tr style="vertical-align:top">
    <td>
      <p><span class="T_Filenames">SUCCESS</span></p>
    </td>
    <td>
      <p>Info</p>
    </td>
  </tr>
  <tr style="vertical-align:top">
    <td>
      <p><span class="T_Filenames">WARNING</span></p>
    </td>
    <td>
      <p>Low</p>
    </td>
  </tr>
  <tr style="vertical-align:top">
    <td>
      <p><span class="T_Filenames">ABORTED</span></p>
    </td>
    <td>
      <p>Medium</p>
    </td>
  </tr>
  <tr style="vertical-align:top">
    <td>
      <p><span class="T_Filenames">FAILED</span></p>
    </td>
    <td>
      <p>Critical</p>
    </td>
  </tr>
</table>

**Workloads**: Veeam Data Cloud for Microsoft 365, Veeam Data Cloud for Microsoft Azure

## Parameters

The parameter set is the same for every source that sends this event.

<table class="Blue_Table">
  <tr style="vertical-align:top">
    <th>
      <p>Parameter Name</p>
    </th>
    <th>
      <p>Description</p>
    </th>
    <th>
      <p>Example</p>
    </th>
  </tr>
  <tr style="vertical-align:top">
    <td>
      <p><span class="T_Filenames">specversion</span></p>
    </td>
    <td>
      Event schema version.
    </td>
    <td>
      <p><span class="T_Filenames">ev20260814</span></p>
    </td>
  </tr>
  <tr style="vertical-align:top">
    <td>
      <p><span class="T_Filenames">source</span></p>
    </td>
    <td>
      System that sent the event. Possible values: `CONTROLPLANE`, `M365`, `AZURE`.
    </td>
    <td>
      <p><span class="T_Filenames">M365</span></p>
    </td>
  </tr>
  <tr style="vertical-align:top">
    <td>
      <p><span class="T_Filenames">timestamp</span></p>
    </td>
    <td>
      Time when the event happened, in RFC3339Nano format and the UTC time zone.
    </td>
    <td>
      <p><span class="T_Filenames">2026-08-04T09:18:42Z</span></p>
    </td>
  </tr>
  <tr style="vertical-align:top">
    <td>
      <p><span class="T_Filenames">type</span></p>
    </td>
    <td>
      Event ID.
    </td>
    <td>
      <p><span class="T_Filenames">vdc.workload_v0.tenant_v0.restore.execution_v0.lifecycle_v0</span></p>
    </td>
  </tr>
  <tr style="vertical-align:top">
    <td>
      <p><span class="T_Filenames">severity</span></p>
    </td>
    <td>
      Event severity. Possible values: `INFO`, `LOW`, `MEDIUM`, `HIGH`, `CRITICAL`.
    </td>
    <td>
      <p><span class="T_Filenames">INFO</span></p>
    </td>
  </tr>
  <tr style="vertical-align:top">
    <td>
      <p><span class="T_Filenames">visibility</span></p>
    </td>
    <td>
      Intended visibility scope of the event. Only events with the `CUSTOMER_ACCESSIBLE` value are forwarded to SIEM platforms, so a forwarded event always carries this value.
    </td>
    <td>
      <p><span class="T_Filenames">CUSTOMER_ACCESSIBLE</span></p>
    </td>
  </tr>
  <tr style="vertical-align:top">
    <td>
      <p><span class="T_Filenames">category</span></p>
    </td>
    <td>
      Event category. Possible values: `BACKUP`, `RESTORE`, `LOGIN`, `USER_MANAGEMENT`, `TENANT_MANAGEMENT`, `ORGANIZATION_MANAGEMENT`, `SUBSCRIPTION_MANAGEMENT`, `SECURITY_ALERT`, `INTERNAL`.
    </td>
    <td>
      <p><span class="T_Filenames">RESTORE</span></p>
    </td>
  </tr>
  <tr style="vertical-align:top">
    <td>
      <p><span class="T_Filenames">actor.identifier</span></p>
    </td>
    <td>
      Actor identifier.
    </td>
    <td>
      <p><span class="T_Filenames">alice@example.com</span></p>
    </td>
  </tr>
  <tr style="vertical-align:top">
    <td>
      <p><span class="T_Filenames">actor.kind</span></p>
    </td>
    <td>
      Actor type that triggered the event. Possible values: `user`, `system`, `service_account`.
    </td>
    <td>
      <p><span class="T_Filenames">user</span></p>
    </td>
  </tr>
  <tr style="vertical-align:top">
    <td>
      <p><span class="T_Filenames">organizationReference.workloadTenantId</span></p>
    </td>
    <td>
      Workload tenant ID.
    </td>
    <td>
      <p><span class="T_Filenames">tenant_12345</span></p>
    </td>
  </tr>
  <tr style="vertical-align:top">
    <td>
      <p><span class="T_Filenames">orgId</span></p>
    </td>
    <td>
      ID of the Veeam Data Cloud organization that the event belongs to. Resolved during event processing, so it is present even when the event references only a workload tenant.
    </td>
    <td>
      <p><span class="T_Filenames">org_12345</span></p>
    </td>
  </tr>
  <tr style="vertical-align:top">
    <td>
      <p><span class="T_Filenames">data.workload.type</span></p>
    </td>
    <td>
      <p>Workload type. Possible values: <code>M365</code>, <code>AZURE</code>.</p>
    </td>
    <td>
      <p><span class="T_Filenames">M365</span></p>
    </td>
  </tr>
  <tr style="vertical-align:top">
    <td>
      <p><span class="T_Filenames">data.tenant.id</span></p>
    </td>
    <td>
      <p>Tenant ID.</p>
    </td>
    <td>
      <p><span class="T_Filenames">tenant_12345</span></p>
    </td>
  </tr>
  <tr style="vertical-align:top">
    <td>
      <p><span class="T_Filenames">data.execution.id</span></p>
    </td>
    <td>
      <p>Restore execution ID.</p>
    </td>
    <td>
      <p><span class="T_Filenames">execution_12345</span></p>
    </td>
  </tr>
  <tr style="vertical-align:top">
    <td>
      <p><span class="T_Filenames">data.lifecycle.startTime</span></p>
    </td>
    <td>
      <p>Date and time when the restore execution started.</p>
    </td>
    <td>
      <p><span class="T_Filenames">2026-08-04T09:12:00Z</span></p>
    </td>
  </tr>
  <tr style="vertical-align:top">
    <td>
      <p><span class="T_Filenames">data.lifecycle.endTime</span></p>
    </td>
    <td>
      <p>Date and time when the restore execution completed.</p>
    </td>
    <td>
      <p><span class="T_Filenames">2026-08-04T09:18:42Z</span></p>
    </td>
  </tr>
  <tr style="vertical-align:top">
    <td>
      <p><span class="T_Filenames">data.lifecycle.status</span></p>
    </td>
    <td>
      <p>Current restore execution status. Possible values: <span class="T_Filenames">QUEUED</span>, <span class="T_Filenames">STARTED</span>, <span class="T_Filenames">SUCCESS</span>, <span class="T_Filenames">WARNING</span>, <span class="T_Filenames">FAILED</span>, <span class="T_Filenames">ABORTED</span>.</p>
    </td>
    <td>
      <p><span class="T_Filenames">STARTED</span></p>
    </td>
  </tr>
</table>

## Event Example

### Restore Started

```json
{
  "specversion": "ev20260814",
  "source": "M365",
  "timestamp": "2026-08-04T09:18:42Z",
  "type": "vdc.workload_v0.tenant_v0.restore.execution_v0.lifecycle_v0",
  "severity": "INFO",
  "visibility": "CUSTOMER_ACCESSIBLE",
  "category": "RESTORE",
  "actor": {
    "identifier": "alice@example.com",
    "kind": "user"
  },
  "organizationReference": {
    "workloadTenantId": "tenant_12345"
  },
  "orgId": "org_12345",
  "data": {
    "workload": {
      "type": "M365"
    },
    "tenant": {
      "id": "tenant_12345"
    },
    "execution": {
      "id": "execution_12345"
    },
    "lifecycle": {
      "startTime": "2026-08-04T09:12:00Z",
      "status": "STARTED"
    }
  }
}
```

### Restore Stopped

```json
{
  "specversion": "ev20260814",
  "source": "M365",
  "timestamp": "2026-08-04T09:18:42Z",
  "type": "vdc.workload_v0.tenant_v0.restore.execution_v0.lifecycle_v0",
  "severity": "MEDIUM",
  "visibility": "CUSTOMER_ACCESSIBLE",
  "category": "RESTORE",
  "actor": {
    "identifier": "alice@example.com",
    "kind": "user"
  },
  "organizationReference": {
    "workloadTenantId": "tenant_12345"
  },
  "orgId": "org_12345",
  "data": {
    "workload": {
      "type": "M365"
    },
    "tenant": {
      "id": "tenant_12345"
    },
    "execution": {
      "id": "execution_12345"
    },
    "lifecycle": {
      "startTime": "2026-08-04T09:12:00Z",
      "endTime": "2026-08-04T09:18:42Z",
      "status": "ABORTED"
    }
  }
}
```

### Restore Resulted in Success

```json
{
  "specversion": "ev20260814",
  "source": "M365",
  "timestamp": "2026-08-04T09:18:42Z",
  "type": "vdc.workload_v0.tenant_v0.restore.execution_v0.lifecycle_v0",
  "severity": "INFO",
  "visibility": "CUSTOMER_ACCESSIBLE",
  "category": "RESTORE",
  "actor": {
    "identifier": "alice@example.com",
    "kind": "user"
  },
  "organizationReference": {
    "workloadTenantId": "tenant_12345"
  },
  "orgId": "org_12345",
  "data": {
    "workload": {
      "type": "M365"
    },
    "tenant": {
      "id": "tenant_12345"
    },
    "execution": {
      "id": "execution_12345"
    },
    "lifecycle": {
      "startTime": "2026-08-04T09:12:00Z",
      "endTime": "2026-08-04T09:18:42Z",
      "status": "SUCCESS"
    }
  }
}
```