Skip to content

Privileged user monitoring moves to GA #4474

New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

Sign up for GitHub

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Open
natasha-moore-elastic wants to merge 2 commits into
base: main
Choose a base branch
from
Open

Privileged user monitoring moves to GA #4474

Show file tree
Hide file tree
Changes from all commits
Commits
Show all changes
2 commits
Select commit Hold shift + click to select a range
b6d3373
Privileged user monitoring moves to GA
natasha-moore-elastic Dec 30, 2025
c106813
add missing applies_to
natasha-moore-elastic Dec 31, 2025
File filter

Filter by extension

Filter by extension
Conversations
Failed to load comments.
Loading
Jump to
Jump to file
Failed to load files.
Loading
Diff view
Diff view
4 changes: 2 additions & 2 deletions ...tions/security/advanced-entity-analytics/monitor-privileged-user-activitites.md
View file
Open in desktop
Original file line number Diff line number Diff line change
@@ -1,8 +1,8 @@
---
applies_to:
stack: preview 9.1
stack: ga 9.3, preview 9.1
serverless:
security: preview
security: ga
products:
- id: security
- id: cloud-serverless
Expand Down
2 changes: 1 addition & 1 deletion solutions/security/advanced-entity-analytics/overview.md
View file
Open in desktop
Original file line number Diff line number Diff line change
Expand Up @@ -17,7 +17,7 @@ To access the page, find **Entity analytics** → **Overview** in the navigation
:::{admonition} Requirements
* This feature requires the appropriate [subscription](https://www.elastic.co/pricing) in {{stack}} or [project feature tier](/deploy-manage/deploy/elastic-cloud/project-settings.md) in {{serverless-short}}.

* To get access to this page, turn on the `securitySolution:enablePrivilegedUserMonitoring` [advanced setting](/solutions/security/get-started/configure-advanced-settings.md#access-privileged-user-monitoring).
* {applies_to}`serverless: removed` {applies_to}`stack: removed 9.3` To get access to this page, turn on the `securitySolution:enablePrivilegedUserMonitoring` [advanced setting](/solutions/security/get-started/configure-advanced-settings.md#access-privileged-user-monitoring).
:::


Expand Down
6 changes: 3 additions & 3 deletions ...s/security/advanced-entity-analytics/privileged-user-monitoring-requirements.md
View file
Open in desktop
Original file line number Diff line number Diff line change
@@ -1,8 +1,8 @@
---
applies_to:
stack: preview 9.1
stack: ga 9.3, preview 9.1
serverless:
security: preview
security: ga
products:
- id: security
- id: cloud-serverless
Expand All @@ -16,7 +16,7 @@ The privileged user monitoring feature requires:
* {applies_to}`stack: ` The appropriate [subscription](https://www.elastic.co/subscriptions)
* {applies_to}`serverless: ` The appropriate [feature tier](https://www.elastic.co/pricing/serverless-security)

To enable this feature, turn on the `securitySolution:enablePrivilegedUserMonitoring` [advanced setting](/solutions/security/get-started/configure-advanced-settings.md#access-privileged-user-monitoring).
{applies_to}`serverless: removed` {applies_to}`stack: removed 9.3` To enable this feature, turn on the `securitySolution:enablePrivilegedUserMonitoring` [advanced setting](/solutions/security/get-started/configure-advanced-settings.md#access-privileged-user-monitoring).

To use this feature, you need:
* {applies_to}`stack: ` A role with the appropriate [privileges](#privmon_privs)
Expand Down
6 changes: 3 additions & 3 deletions solutions/security/advanced-entity-analytics/privileged-user-monitoring-setup.md
View file
Open in desktop
Original file line number Diff line number Diff line change
@@ -1,9 +1,9 @@
---
navigation_title: Set up privileged user monitoring
applies_to:
stack: preview 9.1
stack: ga 9.3, preview 9.1
serverless:
security: preview
security: ga
products:
- id: security
- id: cloud-serverless
Expand All @@ -15,7 +15,7 @@ products:
To use privileged user monitoring, you must:

* Have the appropriate user role or privileges
* Turn on the required advanced setting
* {applies_to}`serverless: removed` {applies_to}`stack: removed 9.3` Turn on the required advanced setting

For more information, refer to [Privileged user monitoring requirements](/solutions/security/advanced-entity-analytics/privileged-user-monitoring-requirements.md).
:::
Expand Down
4 changes: 2 additions & 2 deletions solutions/security/advanced-entity-analytics/privileged-user-monitoring.md
View file
Open in desktop
Original file line number Diff line number Diff line change
@@ -1,8 +1,8 @@
---
applies_to:
stack: preview 9.1
stack: ga 9.3, preview 9.1
serverless:
security: preview
security: ga
products:
- id: security
- id: cloud-serverless
Expand Down
4 changes: 2 additions & 2 deletions solutions/security/get-started/configure-advanced-settings.md
View file
Open in desktop
Original file line number Diff line number Diff line change
Expand Up @@ -250,8 +250,8 @@ Even when the `excludedDataTiersForRuleExecution` advanced setting is enabled, i

## Access privileged user monitoring
```yaml {applies_to}
stack: ga 9.1
serverless: ga
stack: removed 9.3, ga 9.1
serverless: removed
```

The `securitySolution:enablePrivilegedUserMonitoring` setting allows you to access the [Entity analytics overview page](/solutions/security/advanced-entity-analytics/overview.md) and the [privileged user monitoring](/solutions/security/advanced-entity-analytics/privileged-user-monitoring.md) feature. This setting is turned off by default.
Expand Down
1 change: 1 addition & 0 deletions solutions/security/get-started/elastic-security-ui.md
View file
Open in desktop
Original file line number Diff line number Diff line change
Expand Up @@ -154,6 +154,7 @@ serverless: ga
```

:::{admonition} Requirements
:applies_to: {"stack": removed 9.3", "serverless": "removed"}
To access this section, turn on the `securitySolution:enablePrivilegedUserMonitoring` [advanced setting](/solutions/security/get-started/configure-advanced-settings.md#access-privileged-user-monitoring).
:::

Expand Down
Loading