User Status Changed

Sent when a user is created or deleted in an organization, or when a user invitation is sent or deleted.

General Information

Event ID: vdc.org_v0.user_v0.statusChanged_v0

Event message details: Sent with data.statusChanged.action set to CREATED, DELETED, INVITED or INVITE_DELETED.

Severity: Info

Workloads: Control Plane

Parameters

Parameters

Parameter Name

Description

Example

specversion

Event schema version.

ev20260814

source

System that sent the event. Possible values: CONTROLPLANE, M365, AZURE.

CONTROLPLANE

timestamp

Time when the event happened, in RFC3339Nano format and the UTC time zone.

2026-08-04T09:18:42Z

type

Event ID.

vdc.org_v0.user_v0.statusChanged_v0

severity

Event severity. Possible values: INFO, LOW, MEDIUM, HIGH, CRITICAL.

INFO

visibility

Intended visibility scope of the event. Only events with the CUSTOMER_ACCESSIBLE value are forwarded to SIEM platforms, so a forwarded event always carries this value.

CUSTOMER_ACCESSIBLE

category

Event category. Possible values: BACKUP, RESTORE, LOGIN, USER_MANAGEMENT, TENANT_MANAGEMENT, ORGANIZATION_MANAGEMENT, SUBSCRIPTION_MANAGEMENT, SECURITY_ALERT, INTERNAL.

USER_MANAGEMENT

actor.identifier

Actor identifier.

admin@bob.networking

actor.kind

Actor type that triggered the event. Possible values: user, system, service_account.

user

organizationReference.organizationId

ID of the Veeam Data Cloud organization.

org_12345

orgId

ID of the Veeam Data Cloud organization that the event belongs to. Resolved during event processing, so it is present even when the event references only a workload tenant.

org_12345

data.statusChanged.action

Action performed on the user status. Possible values: INVITED, INVITE_DELETED, CREATED, DELETED.

CREATED

data.statusChanged.externalID

Veeam Account ID of the Veeam Data Cloud organization the user belongs to. Supplied only for the first user in the organization.

VA-12345

data.statusChanged.isFirstUser

Whether the user is the first user in the Veeam Data Cloud organization. Possible values: true, false.

false

data.user.id

User ID. Set to the user email address when the user has no canonical ID, and absent when the invitation precedes the creation of the user ID.

user_12345

data.user.primaryEmail

User primary email address.

alice@bob.networking

data.org.id

ID of the Veeam Data Cloud organization.

org_12345

data.org.name

Name of the Veeam Data Cloud organization.

Alice and Bob's Networking

Event Example

User Created

{

"specversion": "ev20260814",

"source": "CONTROLPLANE",

"timestamp": "2026-08-04T09:18:42Z",

"type": "vdc.org_v0.user_v0.statusChanged_v0",

"severity": "INFO",

"visibility": "CUSTOMER_ACCESSIBLE",

"category": "USER_MANAGEMENT",

"actor": {

"identifier": "admin@bob.networking",

"kind": "user"

},

"organizationReference": {

"organizationId": "org_12345"

},

"orgId": "org_12345",

"data": {

"statusChanged": {

"action": "CREATED",

"isFirstUser": false

},

"user": {

"id": "user_12345",

"primaryEmail": "alice@bob.networking"

},

"org": {

"id": "org_12345",

"name": "Alice and Bob's Networking"

}

}

}

User Invite Sent

{

"specversion": "ev20260814",

"source": "CONTROLPLANE",

"timestamp": "2026-08-04T09:18:42Z",

"type": "vdc.org_v0.user_v0.statusChanged_v0",

"severity": "INFO",

"visibility": "CUSTOMER_ACCESSIBLE",

"category": "USER_MANAGEMENT",

"actor": {

"identifier": "admin@bob.networking",

"kind": "user"

},

"organizationReference": {

"organizationId": "org_12345"

},

"orgId": "org_12345",

"data": {

"statusChanged": {

"action": "INVITED",

"isFirstUser": false

},

"user": {

"id": "alice@bob.networking",

"primaryEmail": "alice@bob.networking"

},

"org": {

"id": "org_12345",

"name": "Alice and Bob's Networking"

}

}

}

User Deleted

{

"specversion": "ev20260814",

"source": "CONTROLPLANE",

"timestamp": "2026-08-04T09:18:42Z",

"type": "vdc.org_v0.user_v0.statusChanged_v0",

"severity": "INFO",

"visibility": "CUSTOMER_ACCESSIBLE",

"category": "USER_MANAGEMENT",

"actor": {

"identifier": "admin@bob.networking",

"kind": "user"

},

"organizationReference": {

"organizationId": "org_12345"

},

"orgId": "org_12345",

"data": {

"statusChanged": {

"action": "DELETED",

"isFirstUser": false

},

"user": {

"id": "user_12345",

"primaryEmail": "alice@bob.networking"

},

"org": {

"id": "org_12345",

"name": "Alice and Bob's Networking"

}

}

}

User Invite Deleted

{

"specversion": "ev20260814",

"source": "CONTROLPLANE",

"timestamp": "2026-08-04T09:18:42Z",

"type": "vdc.org_v0.user_v0.statusChanged_v0",

"severity": "INFO",

"visibility": "CUSTOMER_ACCESSIBLE",

"category": "USER_MANAGEMENT",

"actor": {

"identifier": "admin@bob.networking",

"kind": "user"

},

"organizationReference": {

"organizationId": "org_12345"

},

"orgId": "org_12345",

"data": {

"statusChanged": {

"action": "INVITE_DELETED",

"isFirstUser": false

},

"user": {

"id": "alice@bob.networking",

"primaryEmail": "alice@bob.networking"

},

"org": {

"id": "org_12345",

"name": "Alice and Bob's Networking"

}

}

}