---
metadata:
  - name: generator
    content: Diplodoc Platform v5.50.2
  - property: og:type
    content: article
  - property: article:section
    content: Security
  - property: og:title
    content: API usage scenarios for information security
  - property: article:tag
    content: Navigation
alternate:
  - https://yandex.com/support/yandex-360/business/admin/en/security/api-info.md
---
> **Documentation Index:** Fetch the complete configuration index at https://yandex.com/support/yandex-360/business/admin/en/llms.txt


# API usage scenarios for information security

Yandex 360 for Business [administrators](*admin) can control settings that help facilitate information security in the company. Most of these settings can also be managed via the API.

Here are the core API scenarios that security departments may find useful:

- [Anti-spam settings](https://yandex.ru/dev/api360/doc/ru/ref/MailAntispamIpAllowlistService): Create, edit, or delete a whitelist of senders with allowed IP addresses and CIDR subnets.

- [Yandex Disk audit log](https://yandex.ru/dev/api360/doc/ru/ref/AuditLogService/AuditLogService_Disk): View the list of events in the organization's Yandex Disk audit log.

- [Yandex Mail audit log](https://yandex.ru/dev/api360/doc/ru/ref/AuditLogService/AuditLogService_Mail): View the list of events in the organization's Yandex Mail audit log.

- [Two-factor authentication (2FA)](https://yandex.ru/dev/api360/doc/ru/ref/Domain2FAService): Enable or disable 2FA for all domain users. 

- [Reset the phone number for 2FA](https://yandex.ru/dev/api360/doc/ru/ref/UserService/UserService_Delete2fa): Delete an employee's phone number used for two-factor authentication.

- [Sign out](https://yandex.ru/dev/api360/doc/ru/ref/DomainSessionsService/DomainSessionsService_UserLogout): Sign out of a specific user account on all devices where there are active sessions.

- [Cookie lifetime](https://yandex.ru/dev/api360/doc/ru/ref/DomainSessionsService/DomainSessionsService_Update): Change the lifetime of user session cookies.

- [Password policy settings](https://yandex.ru/dev/api360/doc/ru/ref/DomainPasswordsService): View or configure the organization's password policy settings. For example, the password expiration period and the ability of users to change passwords on their own. 

- [Email transport rules](https://yandex.ru/dev/api360/doc/ru/ref/RoutingService/RoutingService_SetRules): Create filters for processing incoming emails that take priority over user filters. For example, you can set up forwarding copies of emails that meet specific criteria to a designated address. Or block email delivery from certain senders.

- [Auto-reply or forwarding rules](https://yandex.ru/dev/api360/doc/ru/ref/MailUserSettingsService/MailUserSettingsService_CreateRule): Create auto-reply rules for emails addressed to an employee or rules for forwarding them to other mailboxes within the organization's domain.

- Information about employees: [View](https://yandex.ru/dev/api360/doc/ru/ref/UserService/UserService_Get) employee details (for example, whether they have administrator privileges or if their account is blocked or active) or [edit](https://yandex.ru/dev/api360/doc/ru/ref/UserService/UserService_Update) them (for example, reset an employee's password or set the flag to change the password at first login).


{% note info %}

For the complete list of available actions, see the [Yandex 360 API documentation for developers](https://yandex.ru/dev/api360/doc/concepts/intro).

{% endnote %}



[*admin]: An employee with the rights to manage organization settings in Yandex 360 for Business. [How to grant administrator rights](https://yandex.com/support/business/admin.html)