---
type: api
title: Security entity analytics
description: Use the Security entity analytics APIs to manage entity analytics and risk scoring, including asset criticality, privileged user monitoring, and entity engines.
url: https://www.elastic.co/elastic/docs-builder/docs/4371/api/doc/kibana/v0/group/endpoint-security-entity-analytics-api
resource: https://www.elastic.co/elastic/docs-builder/docs/4371/api/doc/kibana/v0/group/endpoint-security-entity-analytics-api
products:
  - Kibana
---

# Security entity analytics

`Security Entity Analytics API`

Use the Security entity analytics APIs to manage entity analytics and risk scoring, including asset criticality, privileged user monitoring, and entity engines.

- [Delete an asset criticality record](https://www.elastic.co/elastic/docs-builder/docs/4371/api/doc/kibana/v0/operation/operation-deleteassetcriticalityrecord): `DELETE` `/api/asset_criticality`
- [Get an asset criticality record](https://www.elastic.co/elastic/docs-builder/docs/4371/api/doc/kibana/v0/operation/operation-getassetcriticalityrecord): `GET` `/api/asset_criticality`
- [Upsert an asset criticality record](https://www.elastic.co/elastic/docs-builder/docs/4371/api/doc/kibana/v0/operation/operation-createassetcriticalityrecord): `POST` `/api/asset_criticality`
- [Bulk upsert asset criticality records](https://www.elastic.co/elastic/docs-builder/docs/4371/api/doc/kibana/v0/operation/operation-bulkupsertassetcriticalityrecords): `POST` `/api/asset_criticality/bulk`
- [List asset criticality records](https://www.elastic.co/elastic/docs-builder/docs/4371/api/doc/kibana/v0/operation/operation-findassetcriticalityrecords): `GET` `/api/asset_criticality/list`
- [Delete the Privilege Monitoring Engine](https://www.elastic.co/elastic/docs-builder/docs/4371/api/doc/kibana/v0/operation/operation-deletemonitoringengine): `DELETE` `/api/entity_analytics/monitoring/engine/delete`
- [Disable the Privilege Monitoring Engine](https://www.elastic.co/elastic/docs-builder/docs/4371/api/doc/kibana/v0/operation/operation-disablemonitoringengine): `POST` `/api/entity_analytics/monitoring/engine/disable`
- [Initialize the Privilege Monitoring Engine](https://www.elastic.co/elastic/docs-builder/docs/4371/api/doc/kibana/v0/operation/operation-initmonitoringengine): `POST` `/api/entity_analytics/monitoring/engine/init`
- [Schedule the Privilege Monitoring Engine](https://www.elastic.co/elastic/docs-builder/docs/4371/api/doc/kibana/v0/operation/operation-schedulemonitoringengine): `POST` `/api/entity_analytics/monitoring/engine/schedule_now`
- [Health check on Privilege Monitoring](https://www.elastic.co/elastic/docs-builder/docs/4371/api/doc/kibana/v0/operation/operation-privmonhealth): `GET` `/api/entity_analytics/monitoring/privileges/health`
- [Run a privileges check on Privilege Monitoring](https://www.elastic.co/elastic/docs-builder/docs/4371/api/doc/kibana/v0/operation/operation-privmonprivileges): `GET` `/api/entity_analytics/monitoring/privileges/privileges`
- [Create a new monitored user](https://www.elastic.co/elastic/docs-builder/docs/4371/api/doc/kibana/v0/operation/operation-createprivmonuser): `POST` `/api/entity_analytics/monitoring/users`
- [Upsert multiple monitored users via CSV upload](https://www.elastic.co/elastic/docs-builder/docs/4371/api/doc/kibana/v0/operation/operation-privmonbulkuploaduserscsv): `POST` `/api/entity_analytics/monitoring/users/_csv`
- [Delete a monitored user](https://www.elastic.co/elastic/docs-builder/docs/4371/api/doc/kibana/v0/operation/operation-deleteprivmonuser): `DELETE` `/api/entity_analytics/monitoring/users/{id}`
- [Update a monitored user](https://www.elastic.co/elastic/docs-builder/docs/4371/api/doc/kibana/v0/operation/operation-updateprivmonuser): `PUT` `/api/entity_analytics/monitoring/users/{id}`
- [List all monitored users](https://www.elastic.co/elastic/docs-builder/docs/4371/api/doc/kibana/v0/operation/operation-listprivmonusers): `GET` `/api/entity_analytics/monitoring/users/list`
- [Installs the privileged access detection package for the Entity Analytics privileged user monitoring experience](https://www.elastic.co/elastic/docs-builder/docs/4371/api/doc/kibana/v0/operation/operation-installprivilegedaccessdetectionpackage): `POST` `/api/entity_analytics/privileged_user_monitoring/pad/install`
- [Gets the status of the privileged access detection package for the Entity Analytics privileged user monitoring experience](https://www.elastic.co/elastic/docs-builder/docs/4371/api/doc/kibana/v0/operation/operation-getprivilegedaccessdetectionpackagestatus): `GET` `/api/entity_analytics/privileged_user_monitoring/pad/status`
- [Create a new watchlist](https://www.elastic.co/elastic/docs-builder/docs/4371/api/doc/kibana/v0/operation/operation-createwatchlist): `POST` `/api/entity_analytics/watchlists`
- [Get a watchlist by ID](https://www.elastic.co/elastic/docs-builder/docs/4371/api/doc/kibana/v0/operation/operation-getwatchlist): `GET` `/api/entity_analytics/watchlists/{id}`
- [Update an existing watchlist](https://www.elastic.co/elastic/docs-builder/docs/4371/api/doc/kibana/v0/operation/operation-updatewatchlist): `PUT` `/api/entity_analytics/watchlists/{id}`
- [Upload a CSV file to add entities to a watchlist](https://www.elastic.co/elastic/docs-builder/docs/4371/api/doc/kibana/v0/operation/operation-uploadwatchlistcsv): `POST` `/api/entity_analytics/watchlists/{watchlist_id}/csv_upload`
- [Manually assign entities to a watchlist](https://www.elastic.co/elastic/docs-builder/docs/4371/api/doc/kibana/v0/operation/operation-assignwatchlistentities): `POST` `/api/entity_analytics/watchlists/{watchlist_id}/entities/assign`
- [Manually unassign entities from a watchlist](https://www.elastic.co/elastic/docs-builder/docs/4371/api/doc/kibana/v0/operation/operation-unassignwatchlistentities): `POST` `/api/entity_analytics/watchlists/{watchlist_id}/entities/unassign`
- [List all watchlists](https://www.elastic.co/elastic/docs-builder/docs/4371/api/doc/kibana/v0/operation/operation-listwatchlists): `GET` `/api/entity_analytics/watchlists/list`
- [Cleanup the Risk Engine](https://www.elastic.co/elastic/docs-builder/docs/4371/api/doc/kibana/v0/operation/operation-cleanupriskengine): `DELETE` `/api/risk_score/engine/dangerously_delete_data`
- [Configure the Risk Engine Saved Object](https://www.elastic.co/elastic/docs-builder/docs/4371/api/doc/kibana/v0/operation/operation-configureriskenginesavedobject): `PATCH` `/api/risk_score/engine/saved_object/configure`
- [Run the risk scoring engine](https://www.elastic.co/elastic/docs-builder/docs/4371/api/doc/kibana/v0/operation/operation-scheduleriskenginenow): `POST` `/api/risk_score/engine/schedule_now`
- [Get risk score history for an entity](https://www.elastic.co/elastic/docs-builder/docs/4371/api/doc/kibana/v0/operation/operation-getriskscorehistory): `GET` `/api/risk_score/history`