---
title: Privileged user monitoring
description: Privileged user monitoring allows you to track the activity of users with elevated permissions, such as system administrators or users with access to...
url: https://www.elastic.co/docs/solutions/security/advanced-entity-analytics/privileged-user-monitoring
products:
  - Elastic Cloud Serverless
  - Elastic Security
applies_to:
  - Serverless Security projects: Generally available
  - Elastic Stack: Removed in 9.4, Generally available in 9.3, Preview from 9.1 to 9.2
---

# Privileged user monitoring
<note applies-to="Elastic Cloud Serverless: Removed, Elastic Stack: Removed in 9.4">
  Privileged user monitoring is removed. Use [Watchlists](https://www.elastic.co/docs/solutions/security/advanced-entity-analytics/watchlists) instead.
</note>

Privileged user monitoring allows you to track the activity of users with elevated permissions, such as system administrators or users with access to sensitive data. These accounts are often targets for attackers who try to gain elevated privileges and access critical systems. To reduce this risk, it’s important to monitor and audit privileged users’ behavior regularly.
Use privileged user monitoring to proactively identify suspicious activities, such as over-provisioning of rights or malicious insider threats, before they cause damage.
The [Privileged user monitoring dashboard](https://www.elastic.co/docs/solutions/security/advanced-entity-analytics/monitor-privileged-user-activitites) gives you a centralized, high-level view of privileged users’ activity. It helps you identify suspicious behavior, prioritize investigations, and quickly access the data you need to respond.