If you're using a secured Jenkins, you must specify a valid username and password for the IM bot. Otherwise most commands won't work.
You can also use this to restrict which commands can be executed via the bot, by removing the respective permissions for this user.