User Status Changed

Sent when a user is created or deleted in an organization, or when a user invitation is sent or deleted.

General Information

Event ID: vdc.org_v0.user_v0.statusChanged_v0

Event message details: Sent with data.statusChanged.action set to CREATED, DELETED, INVITED or INVITE_DELETED.

Severity: Info

Workloads: Control Plane

Parameters

Parameters
Parameter Name	Description	Example
specversion	Event schema version.	ev20260814
source	System that sent the event. Possible values: CONTROLPLANE, M365.	CONTROLPLANE
timestamp	Time when the event happened, in RFC3339Nano format and the UTC time zone.	2026-08-04T09:18:42Z
type	Event ID.	vdc.org_v0.user_v0.statusChanged_v0
severity	Event severity. Possible values: INFO, LOW, MEDIUM, HIGH, CRITICAL.	INFO
visibility	Intended visibility scope of the event. Only events with the CUSTOMER_ACCESSIBLE value are forwarded to SIEM platforms, so a forwarded event always carries this value.	CUSTOMER_ACCESSIBLE
category	Event category. Possible values: BACKUP, RESTORE, LOGIN, USER_MANAGEMENT, TENANT_MANAGEMENT, ORGANIZATION_MANAGEMENT, SUBSCRIPTION_MANAGEMENT, SECURITY_ALERT, INTERNAL.	USER_MANAGEMENT
actor.identifier	Actor identifier.	admin@bob.networking
actor.kind	Actor type that triggered the event. Possible values: user, system, service_account.	user
organizationReference.organizationId	ID of the Veeam Data Cloud organization.	org_12345
orgId	ID of the Veeam Data Cloud organization that the event belongs to. Resolved during event processing, so it is present even when the event references only a workload tenant.	org_12345
data.statusChanged.action	Action performed on the user status. Possible values: INVITED, INVITE_DELETED, CREATED, DELETED.	CREATED
data.statusChanged.externalID	Veeam Account ID of the Veeam Data Cloud organization the user belongs to. Supplied only for the first user in the organization.	VA-12345
data.statusChanged.isFirstUser	Whether the user is the first user in the Veeam Data Cloud organization. Possible values: true, false.	false
data.user.id	User ID. Set to the user email address when the user has no canonical ID, and absent when the invitation precedes the creation of the user ID.	user_12345
data.user.primaryEmail	User primary email address.	alice@bob.networking
data.org.id	ID of the Veeam Data Cloud organization.	org_12345
data.org.name	Name of the Veeam Data Cloud organization.	Alice and Bob's Networking

Event Example

User Created

{
  "specversion": "ev20260814",
  "source": "CONTROLPLANE",
  "timestamp": "2026-08-04T09:18:42Z",
  "type": "vdc.org_v0.user_v0.statusChanged_v0",
  "severity": "INFO",
  "visibility": "CUSTOMER_ACCESSIBLE",
  "category": "USER_MANAGEMENT",
  "actor": {
    "identifier": "admin@bob.networking",
    "kind": "user"
  },
  "organizationReference": {
    "organizationId": "org_12345"
  },
  "orgId": "org_12345",
  "data": {
    "statusChanged": {
      "action": "CREATED",
      "isFirstUser": false
    },
    "user": {
      "id": "user_12345",
      "primaryEmail": "alice@bob.networking"
    },
    "org": {
      "id": "org_12345",
      "name": "Alice and Bob's Networking"
    }
  }
}

User Invite Sent

{
  "specversion": "ev20260814",
  "source": "CONTROLPLANE",
  "timestamp": "2026-08-04T09:18:42Z",
  "type": "vdc.org_v0.user_v0.statusChanged_v0",
  "severity": "INFO",
  "visibility": "CUSTOMER_ACCESSIBLE",
  "category": "USER_MANAGEMENT",
  "actor": {
    "identifier": "admin@bob.networking",
    "kind": "user"
  },
  "organizationReference": {
    "organizationId": "org_12345"
  },
  "orgId": "org_12345",
  "data": {
    "statusChanged": {
      "action": "INVITED",
      "isFirstUser": false
    },
    "user": {
      "id": "alice@bob.networking",
      "primaryEmail": "alice@bob.networking"
    },
    "org": {
      "id": "org_12345",
      "name": "Alice and Bob's Networking"
    }
  }
}

User Deleted

{
  "specversion": "ev20260814",
  "source": "CONTROLPLANE",
  "timestamp": "2026-08-04T09:18:42Z",
  "type": "vdc.org_v0.user_v0.statusChanged_v0",
  "severity": "INFO",
  "visibility": "CUSTOMER_ACCESSIBLE",
  "category": "USER_MANAGEMENT",
  "actor": {
    "identifier": "admin@bob.networking",
    "kind": "user"
  },
  "organizationReference": {
    "organizationId": "org_12345"
  },
  "orgId": "org_12345",
  "data": {
    "statusChanged": {
      "action": "DELETED",
      "isFirstUser": false
    },
    "user": {
      "id": "user_12345",
      "primaryEmail": "alice@bob.networking"
    },
    "org": {
      "id": "org_12345",
      "name": "Alice and Bob's Networking"
    }
  }
}

User Invite Deleted

{
  "specversion": "ev20260814",
  "source": "CONTROLPLANE",
  "timestamp": "2026-08-04T09:18:42Z",
  "type": "vdc.org_v0.user_v0.statusChanged_v0",
  "severity": "INFO",
  "visibility": "CUSTOMER_ACCESSIBLE",
  "category": "USER_MANAGEMENT",
  "actor": {
    "identifier": "admin@bob.networking",
    "kind": "user"
  },
  "organizationReference": {
    "organizationId": "org_12345"
  },
  "orgId": "org_12345",
  "data": {
    "statusChanged": {
      "action": "INVITE_DELETED",
      "isFirstUser": false
    },
    "user": {
      "id": "alice@bob.networking",
      "primaryEmail": "alice@bob.networking"
    },
    "org": {
      "id": "org_12345",
      "name": "Alice and Bob's Networking"
    }
  }
}