[ERROR] Access Denied - Requested command is not allowed (Status Code: 403)

[DutchMichel]

Hi,

We use feature sets in directadmin and backups for those accounts fail. The feature set and the log is pasted below.
Anyone tips/solutions for this ?

thx
Michel





CMD_API_DOMAIN
CMD_API_SSL
CMD_API_FTP
CMD_API_SHOW_DOMAINS
CMD_REDIRECT
CMD_SSL
CMD_EMAIL_POP
CMD_EMAIL_LIST
CMD_EMAIL_CATCH_ALL
CMD_EMAIL_FILTER
CMD_EMAIL_FORWARDER
CMD_EMAIL_FORWARDER_MODIFY
CMD_EMAIL_AUTORESPONDER
CMD_EMAIL_AUTORESPONDER_CREATE
CMD_EMAIL_AUTORESPONDER_MODIFY
emailvacation
CMD_EMAIL_VACATION
CMD_EMAIL_VACATION_CREATE
CMD_EMAIL_VACATION_MODIFY
CMD_EMAIL_USAGE
CMD_DNS_MX
CMD_SPAMASSASSIN
CMD_WEBMAIL_LOGIN
CMD_AJAX_CHECK_PASSWORD
email-config
CMD_DNS_CONTROL
CMD_API_DNS_CONTROL
CMD_SHOW_DOMAIN
CMD_JSON_VALIDATE
CMD_LOGOUT
CMD_PASSWD
CMD_USER_STATS
CMD_CHANGE_INFO
CMD_LICENSE_VERIFY
CMD_BANDWIDTH_BREAKDOWN
CMD_DU_BREAKDOWN
CMD_PLUGINS
CMD_LOGIN_KEYS
CMD_API_LOGIN_KEYS
CMD_TWOSTEP_AUTH
CMD_LOGIN_HISTORY
CMD_USER_HISTORY
CMD_TICKET
CMD_API_TICKET
CMD_TICKET_CREATE
messages
ticket-requests
login-keys
multi-factor-auth
widgets
profile
plugins


21/Dec/2025 09:39:36 +0000] [PID 3773292] Executing pre account backup hook
[21/Dec/2025 09:39:36 +0000] [PID 3773292] Starting account backup for ntinawyh
[21/Dec/2025 09:39:36 +0000] [PID 3773292] Destination "Remote Datacenter2" Disk Space Usage is 84.44% (169.0 TB out of 200.1 TB)
[21/Dec/2025 09:39:37 +0000] [PID 3773292] Configurations Backup
[21/Dec/2025 09:39:39 +0000] [PID 3773292] - Directory "/usr/local/jetapps/usr/jetbackup5/workspace/backup/datmp_ntinawyh_1766309978kPj0oh8wd"
[21/Dec/2025 09:39:39 +0000] [PID 3773292] Home Directory Backup
[21/Dec/2025 09:39:39 +0000] [PID 3773292] - Directory "/home/ntinawyh"
[21/Dec/2025 09:39:39 +0000] [PID 3773292] Email Accounts Backup
[21/Dec/2025 09:39:39 +0000] [PID 3773292] - Email Account "[email protected]"
[21/Dec/2025 09:39:39 +0000] [PID 3773292] - Email Account "[email protected]"
[21/Dec/2025 09:39:39 +0000] [PID 3773292] - Email Account "[email protected]"
[21/Dec/2025 09:39:39 +0000] [PID 3773292] - Email Account "[email protected]"
[21/Dec/2025 09:39:39 +0000] [PID 3773292] - Email Account "[email protected]"
[21/Dec/2025 09:39:39 +0000] [PID 3773292] - Email Account "[email protected]"
[21/Dec/2025 09:39:39 +0000] [PID 3773292] Domains Backup
[21/Dec/2025 09:39:39 +0000] [PID 3773292] [ERROR] Access Denied - Requested command is not allowed (Status Code: 403)
[21/Dec/2025 09:39:40 +0000] [PID 3773292] Cron Job Backup
[21/Dec/2025 09:39:40 +0000] [PID 3773292] - File "cronjob_ntinawyh_1766309980voErtM56X"
[21/Dec/2025 09:39:40 +0000] [PID 3773292] SSL Certificates Backup
[21/Dec/2025 09:39:40 +0000] [PID 3773292] [ERROR] Access Denied - Requested command is not allowed (Status Code: 403)
[21/Dec/2025 09:39:40 +0000] [PID 3773292] Databases Backup
[21/Dec/2025 09:39:40 +0000] [PID 3773292] Database Users Backup
[21/Dec/2025 09:39:40 +0000] [PID 3773292] FTP Accounts Backup
[21/Dec/2025 09:39:40 +0000] [PID 3773292] [ERROR] Access Denied - Requested command is not allowed (Status Code: 403)
[21/Dec/2025 09:39:40 +0000] [PID 3773292] Transferring account "ntinawyh" backup to destination "Remote Datacenter2"
[21/Dec/2025 09:43:21 +0000] [PID 3773292] Backup Partially Completed
[21/Dec/2025 09:43:21 +0000] [PID 3773292] Executing post account backup hook
[21/Dec/2025 09:43:21 +0000] [PID 3773292]

[JetBackupXavier]

Hello Michel,

The login key being used by JetBackup is missing required DirectAdmin commands in:

Code: Select all

data/users/admin/login_keys/JetBackup5/commands.allow

When required CMD_* / CMD_API_* commands are not allowed, DirectAdmin returns "403 – Requested command is not allowed", which causes JetBackup account backups to complete as Partially Completed.

To identify which commands are missing, enable debug logging in JetBackup:

JetBackup → Settings → Debug Active → Yes

With debug enabled, the backup logs will explicitly show which DirectAdmin command is being denied. You may need to run the backup multiple times, adding each missing command as it appears.

Logs with Debug Enabled:

Code: Select all

[30/Dec/2025 18:49:18 +0000] [PID 536006] [DEBUG] [PANEL] [API] -- START --
[30/Dec/2025 18:49:18 +0000] [PID 536006] [DEBUG] [PANEL] [API] Action: ALL_USER_SHOW
[30/Dec/2025 18:49:18 +0000] [PID 536006] [DEBUG] [PANEL] [API] Method: GET
[30/Dec/2025 18:49:18 +0000] [PID 536006] [DEBUG] [PANEL] [API] URL: http://server-70-165-46-179.da.direct:2222/CMD_ALL_USER_SHOW?json=yes
[30/Dec/2025 18:49:18 +0000] [PID 536006] [DEBUG] [PANEL] [API] Params: bytes=yes&comparison1=equals&value1=u100&ipp=1
[30/Dec/2025 18:49:18 +0000] [PID 536006] [DEBUG] [PANEL] [API] Response Code: 200
[30/Dec/2025 18:49:18 +0000] [PID 536006] [DEBUG] [PANEL] [API] Response Body: {"0":{"username":{"is_user":"yes","value":"u100"},"creator":"admin","bandwidth":{"bold":"0","color":"green","limit":"1048576000","usage":"0"},"quota":{"bold":"0","color":"green","limit":"104857600","usage":"151519"},"vdomains":{"bold":"1","color":"orange","limit":"1","usage":"1"},"suspended":{"reason":"","value":"no"},"ip":["70.165.46.179"],"domains":{"u100.example.com":[]},"sent_emails":"0","date_created":"1765573778"},"add_leave_dns":"no","info":{"columns":{"username":"1","creator":"2","bandwidth":"3","quota":"4","vdomains":"5","suspended":"6","ip":"7","domains":"8","sent_emails":"9","date_created":"10"},"current_page":"1","ipp":"1","rows":"1","total_pages":"1"},"reasons":{"0":{"selected":"yes","text":"-- Reason:","value":"none"},"1":{"text":"Abuse","value":"abuse"},"2":{"text":"Billing Issue","value":"billing"},"3":{"text":"Inactive","value":"inactive"},"4":{"text":"Other","value":"other"},"5":{"text":"Reseller Bandwidth","value":"reseller_bandwidth"},"6":{"text":"Reseller Quota","value":"reseller_quota"},"7":{"text":"Spam","value":"spam"},"8":{"text":"User Bandwidth","value":"user_bandwidth"},"9":{"text":"User Disk Quota","value":"user_quota"}}}
[30/Dec/2025 18:49:18 +0000] [PID 536006] [DEBUG] [PANEL] [API] -- END --
[30/Dec/2025 18:49:18 +0000] [PID 536006] [DEBUG] [PANEL] [API] -- START --
[30/Dec/2025 18:49:18 +0000] [PID 536006] [DEBUG] [PANEL] [API] Action: ADMIN_SHOW
[30/Dec/2025 18:49:18 +0000] [PID 536006] [DEBUG] [PANEL] [API] Method: GET
[30/Dec/2025 18:49:18 +0000] [PID 536006] [DEBUG] [PANEL] [API] URL: http://server-70-165-46-179.da.direct:2222/CMD_ADMIN_SHOW?json=yes
[30/Dec/2025 18:49:18 +0000] [PID 536006] [DEBUG] [PANEL] [API] Params: comparison1=equals&value1=u100
[30/Dec/2025 18:49:18 +0000] [PID 536006] [DEBUG] [PANEL] [API] Response Code: 403
[30/Dec/2025 18:49:18 +0000] [PID 536006] [DEBUG] [PANEL] [API] Response Body: {"error":"Access Denied","result":"Requested command is not allowed"}
[30/Dec/2025 18:49:18 +0000] [PID 536006] [DEBUG] [PANEL] [API] -- END --

The required commands can be re-enabled via:

DirectAdmin → User → Advanced Features → Login Keys

Once all required commands are allowed for the login key, backups should complete normally.

Here is a list of all the default commands inside the "commands.allow" file in case you would like to use that as well.

Code: Select all

ALL_ADMIN
ALL_RESELLER
ALL_USER
CMD_ACCOUNT_ADMIN
CMD_ACCOUNT_RESELLER
CMD_ACCOUNT_USER
CMD_ADDITIONAL_DOMAINS
CMD_ADMIN_BACKUP
CMD_ADMIN_BACKUP_MODIFY
CMD_ADMIN_CRON_JOBS
CMD_ADMIN_FILE_EDITOR
CMD_ADMIN_HISTORY
CMD_ADMIN_SETTINGS
CMD_ADMIN_SHOW
CMD_ADMIN_SSL
CMD_ADMIN_STATS
CMD_AJAX_CHECK_DOMAIN
CMD_AJAX_CHECK_PASSWORD
CMD_AJAX_CHECK_USERNAME
CMD_AJAX_GET_COUNTS
CMD_AJAX_SEARCH
CMD_AJAX_USERS
CMD_ALL_USER_SHOW
CMD_API_ACCOUNT_ADMIN
CMD_API_ACCOUNT_RESELLER
CMD_API_ACCOUNT_USER
CMD_API_ADDITIONAL_DOMAINS
CMD_API_ADMIN_BACKUP
CMD_API_ADMIN_BACKUP_MODIFY
CMD_API_ADMIN_FILE_EDITOR
CMD_API_ADMIN_STATS
CMD_API_ALL_USER_USAGE
CMD_API_BANDWIDTH_BREAKDOWN
CMD_API_BRUTE_FORCE_MONITOR
CMD_API_CHANGE_DOMAIN
CMD_API_CHANGE_INFO
CMD_API_COMMENTS
CMD_API_CRON_JOBS
CMD_API_CUSTOM_HTTPD
CMD_API_DATABASES
CMD_API_DB_USER
CMD_API_DB_USER_PRIVS
CMD_API_DIRECTADMIN_CONF
CMD_API_DNS_ADMIN
CMD_API_DNS_CONTROL
CMD_API_DNS_MX
CMD_API_DOMAIN
CMD_API_DOMAIN_OWNERS
CMD_API_DOMAIN_POINTER
CMD_API_DU_BREAKDOWN
CMD_API_EDIT_USER_MESSAGE
CMD_API_EMAIL_AUTH
CMD_API_EMAIL_AUTORESPONDER
CMD_API_EMAIL_AUTORESPONDER_CREATE
CMD_API_EMAIL_AUTORESPONDER_MODIFY
CMD_API_EMAIL_CATCH_ALL
CMD_API_EMAIL_FILTER
CMD_API_EMAIL_FORWARDERS
CMD_API_EMAIL_LIST
CMD_API_EMAIL_POP
CMD_API_EMAIL_USAGE
CMD_API_EMAIL_VACATION
CMD_API_EMAIL_VACATION_MODIFY
CMD_API_EXEC
CMD_API_FILE_MANAGER
CMD_API_FRONTPAGE
CMD_API_FTP
CMD_API_FTP_SETTINGS
CMD_API_FTP_SHOW
CMD_API_GET_SESSION
CMD_API_HANDLERS
CMD_API_IP_CONFIG
CMD_API_IP_MANAGER
CMD_API_IP_MANAGER_DETAILS
CMD_API_LICENSE
CMD_API_LOAD_AVERAGE
CMD_API_LOGIN_KEYS
CMD_API_LOGIN_TEST
CMD_API_MAIL_QUEUE
CMD_API_MANAGE_RESELLER_PACKAGES
CMD_API_MANAGE_USER_PACKAGES
CMD_API_MODIFY_RESELLER
CMD_API_MODIFY_USER
CMD_API_MOVE_USERS
CMD_API_MULTI_SERVER
CMD_API_NAME_SERVER
CMD_API_NGINX_TEMPLATES
CMD_API_NGINX_TEMPLATES_ADMIN
CMD_API_OWNERS_OWNER
CMD_API_PACKAGES_RESELLER
CMD_API_PACKAGES_USER
CMD_API_PASSWD
CMD_API_PERL_MODULES
CMD_API_PHP_SAFE_MODE
CMD_API_POP
CMD_API_PROCESS_MONITOR
CMD_API_PROTECTED_DIRECTORIES
CMD_API_PUBLIC_STATS
CMD_API_REBOOT
CMD_API_REDIRECT
CMD_API_RESELLER_HISTORY
CMD_API_RESELLER_STATS
CMD_API_RESEND_EMAIL
CMD_API_SECURITY_QUESTIONS
CMD_API_SELECT_USERS
CMD_API_SERVICE
CMD_API_SHOW_ADMINS
CMD_API_SHOW_ALL_USERS
CMD_API_SHOW_DOMAINS
CMD_API_SHOW_RESELLERS
CMD_API_SHOW_RESELLER_CONFIG
CMD_API_SHOW_RESELLER_IPS
CMD_API_SHOW_SERVICES
CMD_API_SHOW_USERS
CMD_API_SHOW_USER_CONFIG
CMD_API_SHOW_USER_DOMAINS
CMD_API_SHOW_USER_USAGE
CMD_API_SITE_BACKUP
CMD_API_SKINS
CMD_API_SPAMASSASSIN
CMD_API_SSH_KEYS
CMD_API_SSL
CMD_API_SUBDOMAIN
CMD_API_SUBDOMAINS
CMD_API_SUBDOMAIN_BANDWIDTH
CMD_API_SYSTEM_INFO
CMD_API_TEMPLATE_DIFF
CMD_API_TICKET
CMD_API_TICKET_CREATE
CMD_API_TICKET_MANAGE
CMD_API_TWOSTEP_AUTH
CMD_API_USER_BACKUP
CMD_API_USER_BACKUP_MODIFY
CMD_API_USER_EXISTS
CMD_API_USER_HISTORY
CMD_API_USER_PASSWD
CMD_API_VERIFY_PASSWORD
CMD_API_WP_MANAGER
CMD_AWSTATS
CMD_BANDWIDTH_BREAKDOWN
CMD_BRUTE_FORCE_MONITOR
CMD_CHANGE_DOMAIN
CMD_CHANGE_INFO
CMD_COMMENTS
CMD_CRON_JOBS
CMD_CUSTOM_HTTPD
CMD_DB
CMD_DB_ACCESS
CMD_DB_CREATE
CMD_DB_USER_CREATE
CMD_DB_USER_PRIVS
CMD_DB_VIEW
CMD_DNS_ADMIN
CMD_DNS_CONTROL
CMD_DNS_MX
CMD_DOMAIN
CMD_DOMAIN_POINTER
CMD_DU_BREAKDOWN
CMD_EDIT_ADMIN_MESSAGE
CMD_EDIT_RESELLER_MESSAGE
CMD_EDIT_USER_MESSAGE
CMD_EMAIL_AUTORESPONDER
CMD_EMAIL_AUTORESPONDER_CREATE
CMD_EMAIL_AUTORESPONDER_MODIFY
CMD_EMAIL_CATCH_ALL
CMD_EMAIL_FILTER
CMD_EMAIL_FORWARDER
CMD_EMAIL_FORWARDER_MODIFY
CMD_EMAIL_LIST
CMD_EMAIL_POP
CMD_EMAIL_REG
CMD_EMAIL_USAGE
CMD_EMAIL_VACATION
CMD_EMAIL_VACATION_CREATE
CMD_EMAIL_VACATION_MODIFY
CMD_FILE_MANAGER
CMD_FRONTPAGE
CMD_FTP
CMD_FTP_SETTINGS
CMD_FTP_SHOW
CMD_HANDLERS
CMD_IP_CONFIG
CMD_IP_MANAGER
CMD_IP_MANAGER_DETAILS
CMD_JSON_LANG
CMD_JSON_OPTIONS
CMD_JSON_VALIDATE
CMD_LICENSE
CMD_LICENSE_VERIFY
CMD_LOGIN
CMD_LOGIN_HISTORY
CMD_LOGIN_KEYS
CMD_LOGOUT
CMD_LOG_VIEWER
CMD_MAIL_QUEUE
CMD_MANAGE_RESELLER_PACKAGES
CMD_MANAGE_USER_PACKAGES
CMD_MIME_TYPES
CMD_MODIFY_RESELLER
CMD_MODIFY_USER
CMD_MOVE_USERS
CMD_MULTI_SERVER
CMD_NAME_SERVER
CMD_NGINX_TEMPLATES
CMD_NGINX_TEMPLATES_ADMIN
CMD_PASSWD
CMD_PERL_MODULES
CMD_PHP_SAFE_MODE
CMD_PLUGINS
CMD_PLUGINS_ADMIN
CMD_PLUGINS_RESELLER
CMD_PLUGIN_MANAGER
CMD_PMA_LOGIN
CMD_PROCESS_MONITOR
CMD_PROTECTED_DIRECTORIES
CMD_PUBLIC_STATS
CMD_REBOOT
CMD_REDIRECT
CMD_RESELLER_HISTORY
CMD_RESELLER_SHOW
CMD_RESELLER_STATS
CMD_RESEND_EMAIL
CMD_SECURITY_QUESTIONS
CMD_SELECT_USERS
CMD_SERVICE
CMD_SHOW_DOMAIN
CMD_SHOW_LOG
CMD_SHOW_RESELLER
CMD_SHOW_RESELLER_PACKAGE
CMD_SHOW_SERVICES
CMD_SHOW_USER
CMD_SHOW_USER_PACKAGE
CMD_SITE_BACKUP
CMD_SKINS
CMD_SPAMASSASSIN
CMD_SSH_KEYS
CMD_SSL
CMD_SUBDOMAIN
CMD_SYSTEM_BACKUP
CMD_SYSTEM_INFO
CMD_TEMPLATE_DIFF
CMD_TICKET
CMD_TICKET_CREATE
CMD_TICKET_MANAGE
CMD_TWOSTEP_AUTH
CMD_USER_BACKUP
CMD_USER_BACKUP_MODIFY
CMD_USER_HISTORY
CMD_USER_PASSWD
CMD_USER_SHOW
CMD_USER_STATS
CMD_WEBALIZER
CMD_WEBMAIL_LOGIN
CMD_WIDGET
plugin-manager