Skip to content

Comments

[9.2] [Entity Analytics] Adding license check to privileged user monitoring routes. (#247986)#248545

Merged
ymao1 merged 4 commits intoelastic:9.2from
ymao1:backport/9.2/pr-247986
Jan 20, 2026
Merged

[9.2] [Entity Analytics] Adding license check to privileged user monitoring routes. (#247986)#248545
ymao1 merged 4 commits intoelastic:9.2from
ymao1:backport/9.2/pr-247986

Conversation

@ymao1
Copy link
Contributor

@ymao1 ymao1 commented Jan 9, 2026

Backport

This will backport the following commits from main to 9.2:

Questions ?

Please refer to the Backport tool documentation

… routes. (elastic#247986)

## Summary

Adds a license check to the route handlers for all the privileged user
monitoring routes. This feature should only be available in for
`platinum` or `enterprise` licenses. The UI correctly gates on this
license and does not show the UI for initializing the engine for `basic`
licenses but the direct API calls did not perform any license checks.

## To Verify
1. Start ES using `yarn es snapshot --license basic --ssl`
2. Start Kibana using `yarn start --ssl`
3. Try to initialize the privileged user monitoring engine using the API
in Dev Tools. You should receive an error response:
<img width="1147" height="162" alt="Screenshot 2026-01-07 at 1 55 40 PM"
src="https://github.com/user-attachments/assets/b0bc40a5-4b14-4701-b452-68e1a766b01c"
/>

4. Go to license management:
`https://localhost:5601/app/management/stack/license_management` and
start a trial license.
5. Navigate back to Dev Tools and try the same API call. You should now
receive a success response:
<img width="978" height="187" alt="Screenshot 2026-01-06 at 1 36 31 PM"
src="https://github.com/user-attachments/assets/13989216-5ddd-4495-86c4-1c95ed294bcd"
/>

Co-authored-by: Elastic Machine <elasticmachine@users.noreply.github.com>
(cherry picked from commit 661530a)

# Conflicts:
#	x-pack/solutions/security/plugins/security_solution/server/lib/entity_analytics/privilege_monitoring/routes/disable.ts
#	x-pack/solutions/security/plugins/security_solution/server/lib/entity_analytics/privilege_monitoring/routes/health.ts
#	x-pack/solutions/security/plugins/security_solution/server/lib/entity_analytics/privilege_monitoring/routes/init.ts
#	x-pack/solutions/security/plugins/security_solution/server/lib/entity_analytics/privilege_monitoring/routes/monitoring_entity_source/create.ts
#	x-pack/solutions/security/plugins/security_solution/server/lib/entity_analytics/privilege_monitoring/routes/monitoring_entity_source/delete.ts
#	x-pack/solutions/security/plugins/security_solution/server/lib/entity_analytics/privilege_monitoring/routes/monitoring_entity_source/get.ts
#	x-pack/solutions/security/plugins/security_solution/server/lib/entity_analytics/privilege_monitoring/routes/monitoring_entity_source/list.ts
#	x-pack/solutions/security/plugins/security_solution/server/lib/entity_analytics/privilege_monitoring/routes/monitoring_entity_source/update.ts
#	x-pack/solutions/security/plugins/security_solution/server/lib/entity_analytics/privilege_monitoring/routes/privileged_access_detection/pad_install.ts
#	x-pack/solutions/security/plugins/security_solution/server/lib/entity_analytics/privilege_monitoring/routes/schedule_now.ts
#	x-pack/solutions/security/plugins/security_solution/server/lib/entity_analytics/privilege_monitoring/routes/users/create.ts
#	x-pack/solutions/security/plugins/security_solution/server/lib/entity_analytics/privilege_monitoring/routes/users/delete.ts
#	x-pack/solutions/security/plugins/security_solution/server/lib/entity_analytics/privilege_monitoring/routes/users/list.ts
#	x-pack/solutions/security/plugins/security_solution/server/lib/entity_analytics/privilege_monitoring/routes/users/upload_csv.ts
#	x-pack/solutions/security/test/security_solution_api_integration/test_suites/entity_analytics/utils/index.ts
@ymao1 ymao1 requested a review from kibanamachine as a code owner January 9, 2026 21:54
@ymao1 ymao1 added the backport This PR is a backport of another PR label Jan 9, 2026
@ymao1 ymao1 enabled auto-merge (squash) January 9, 2026 21:54
@elasticmachine
Copy link
Contributor

💚 Build Succeeded

Metrics [docs]

✅ unchanged

History

@ymao1
Copy link
Contributor Author

ymao1 commented Jan 20, 2026

@elasticmachine merge upstream

@ymao1 ymao1 merged commit 405e731 into elastic:9.2 Jan 20, 2026
13 checks passed
@ymao1 ymao1 deleted the backport/9.2/pr-247986 branch January 20, 2026 13:38
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

backport This PR is a backport of another PR

Projects

None yet

Development

Successfully merging this pull request may close these issues.

3 participants