--- title: "User Status Changed" description: "Sent when a user is created or deleted in an organization, or when a user invitation is sent or deleted. Event ID: vdc.org_v0.user_v0.statusChanged_v0 Event message details: Sent with data.statusChanged.action set to CREATED, DELETED, INVITED or..." canonical: "https://helpcenter.veeam.com/docs/vdc/events/vdc_events_user_status_changed.html" breadcrumb: "Event Reference > Access and Identity > User Status Changed" dateModified: "2026-11-02" --- # User Status Changed Sent when a user is created or deleted in an organization, or when a user invitation is sent or deleted. ## General Information **Event ID**: `vdc.org_v0.user_v0.statusChanged_v0` **Event message details**: Sent with `data.statusChanged.action` set to `CREATED`, `DELETED`, `INVITED` or `INVITE_DELETED`. **Severity**: Info **Workloads**: Control Plane ## Parameters
|
Parameter Name |
Description |
Example |
|---|---|---|
|
specversion |
Event schema version. |
ev20260814 |
|
source |
System that sent the event. Possible values: `CONTROLPLANE`, `M365`, `AZURE`. |
CONTROLPLANE |
|
timestamp |
Time when the event happened, in RFC3339Nano format and the UTC time zone. |
2026-08-04T09:18:42Z |
|
type |
Event ID. |
vdc.org_v0.user_v0.statusChanged_v0 |
|
severity |
Event severity. Possible values: `INFO`, `LOW`, `MEDIUM`, `HIGH`, `CRITICAL`. |
INFO |
|
visibility |
Intended visibility scope of the event. Only events with the `CUSTOMER_ACCESSIBLE` value are forwarded to SIEM platforms, so a forwarded event always carries this value. |
CUSTOMER_ACCESSIBLE |
|
category |
Event category. Possible values: `BACKUP`, `RESTORE`, `LOGIN`, `USER_MANAGEMENT`, `TENANT_MANAGEMENT`, `ORGANIZATION_MANAGEMENT`, `SUBSCRIPTION_MANAGEMENT`, `SECURITY_ALERT`, `INTERNAL`. |
USER_MANAGEMENT |
|
actor.identifier |
Actor identifier. |
admin@bob.networking |
|
actor.kind |
Actor type that triggered the event. Possible values: `user`, `system`, `service_account`. |
user |
|
organizationReference.organizationId |
ID of the Veeam Data Cloud organization. |
org_12345 |
|
orgId |
ID of the Veeam Data Cloud organization that the event belongs to. Resolved during event processing, so it is present even when the event references only a workload tenant. |
org_12345 |
|
data.statusChanged.action |
Action performed on the user status. Possible values: INVITED, INVITE_DELETED, CREATED, DELETED. |
CREATED |
|
data.statusChanged.externalID |
Veeam Account ID of the Veeam Data Cloud organization the user belongs to. Supplied only for the first user in the organization. |
VA-12345 |
|
data.statusChanged.isFirstUser |
Whether the user is the first user in the Veeam Data Cloud organization. Possible values: true, false. |
false |
|
data.user.id |
User ID. Set to the user email address when the user has no canonical ID, and absent when the invitation precedes the creation of the user ID. |
user_12345 |
|
data.user.primaryEmail |
User primary email address. |
alice@bob.networking |
|
data.org.id |
ID of the Veeam Data Cloud organization. |
org_12345 |
|
data.org.name |
Name of the Veeam Data Cloud organization. |
Alice and Bob's Networking |