Critical-risk tools in Infomaniak Admin
28 of the 217 tools in Infomaniak Admin are classified as critical risk. This page profiles those tools specifically, with recommended policy actions and the attack patterns that target them.
Every operation listed below is an action PolicyLayer recommends controlling at the transport layer. Open any tool to see the full profile, risk score, and YAML policy snippet.
Tools at critical risk
-
infomaniak_cancel_user_pending_invitationsDestructiveCancel pending account invitations for a user. Two-phase commit: first call returns the pending invitation list and confirmation token; second call deletes only invitations stil...
-
infomaniak_delete_account_invitationDestructiveDelete an account invitation. Two-phase commit with a fresh invitation snapshot guard.
-
infomaniak_delete_account_tagDestructiveDelete an account tag. Two-phase commit with a fresh tag snapshot guard.
-
infomaniak_delete_account_teamDestructiveDelete an account team. Two-phase commit with a fresh team snapshot guard.
-
infomaniak_delete_certificateDestructiveDelete the SSL certificate of a site (the site will fall back to no HTTPS or Infomaniak
-
infomaniak_delete_databaseDestructiveDelete a MariaDB database. Two-phase commit, manager-private API. WARNING: the database content (tables, rows) is wiped and cannot be recovered without an Infomaniak backup.
-
infomaniak_delete_drive_activity_reportDestructiveDelete a generated kDrive activity report with a current-state guard.
-
infomaniak_delete_drive_userDestructiveDelete a kDrive user from a drive. Destructive two-phase commit with current user guard.
-
infomaniak_delete_hosting_userDestructiveRevoke a hosting user (FTP / SSH access). Two-phase commit. Existing files are not deleted.
-
infomaniak_delete_mailboxDestructiveDelete a mailbox. Two-phase commit. WARNING: this also deletes all stored emails for that mailbox.
-
infomaniak_delete_mailbox_filterDestructiveDelete a mailbox Sieve filter by name. Two-phase commit with current filter inventory guard before DELETE.
-
infomaniak_delete_mailbox_filter_scriptDestructiveDelete a mailbox Sieve script by name. Two-phase commit with current filter/script inventory guard before DELETE.
-
infomaniak_delete_redirectionDestructiveDelete a mail redirection. Two-phase commit.
-
infomaniak_delete_siteDestructiveDelete a site from an Infomaniak web hosting. Two-phase commit: first call returns a plan with the site preview + token, second call (same params + token) actually deletes. WARN...
-
infomaniak_delete_site_aliasDestructiveRemove one alias FQDN from a web hosting site (the main FQDN cannot be removed). Two-phase commit. After this, the site
-
infomaniak_dns_delete_recordDestructiveDelete a DNS record from an Infomaniak-managed zone. Two-phase commit: first call returns a plan with a preview of the record to delete + token, second call (same params + token...
-
infomaniak_empty_drive_trashDestructiveEmpty the entire kDrive trash. Destructive two-phase commit with trash count guard; not undoable.
-
infomaniak_empty_mailbox_trashDestructivePermanently delete all messages in a mailbox trash folder after confirmation.
-
infomaniak_manage_kchat_channelDestructiveCreate, update, patch, move, restore, delete, or change privacy/scheme/moderation for a kChat channel. Two-phase confirmation for all writes.
-
infomaniak_manage_mail_device_accessDestructiveDelete a specific device access, or revoke all device sessions for a mailbox or service user. Uses two-phase confirmation and current-state guards.
-
infomaniak_manage_public_cloud_kubernetes_serviceDestructiveCreate, update, or delete a Public Cloud Kubernetes service with two-phase confirmation.
-
infomaniak_manage_public_cloud_projectDestructiveCreate, update, delete, or create-with-invitation a Public Cloud project using two-phase confirmation.
-
infomaniak_purge_spam_folderDestructiveDelete all messages currently in a mailbox spam folder. Destructive two-phase commit with mailbox security state guard.
-
infomaniak_remove_account_team_usersDestructiveRemove one or more users from an account team. Two-phase commit with a fresh team-members snapshot guard.
-
infomaniak_remove_drive_file_access_teamDestructiveRevoke a team
-
infomaniak_remove_drive_file_access_userDestructiveRevoke a user
-
infomaniak_remove_drive_share_linkDestructiveRemove a kDrive share link through DELETE /2/drive/{drive_id}/files/{file_id}/link. Destructive two-phase commit with current share-link guard.
-
infomaniak_remove_drive_trash_itemDestructivePermanently remove one file or folder from kDrive trash. Destructive two-phase commit with trashed-item guard; not undoable.
Attacks that target this class
Critical-risk tools in any server share these documented attack patterns. Each links to the full case and the defensive policy.