diff --git a/xroot_plugins/XrdSsiCtaRequestMessage.cpp b/xroot_plugins/XrdSsiCtaRequestMessage.cpp
index 3bf5260e110044e5dcae466664824c23eef7b2e8..d1bb13b90e4d0b4ce05086c0694e751384bc36a7 100644
--- a/xroot_plugins/XrdSsiCtaRequestMessage.cpp
+++ b/xroot_plugins/XrdSsiCtaRequestMessage.cpp
@@ -78,7 +78,7 @@ void RequestMessage::process(const cta::xrd::Request &request, cta::xrd::Respons
       case Request::kAdmincmd:
          // Validate that the Kerberos user is an authorized CTA Admin user
          if(m_protocol != Protocol::KRB5) {
-            throw cta::exception::Exception("[ERROR] Admin commands must be authenticated using the Kerberos 5 protocol.");
+            throw cta::exception::UserError("[ERROR] Admin commands must be authenticated using the Kerberos 5 protocol.");
          }
          m_scheduler.authorizeAdmin(m_cliIdentity, m_lc);