---
title: Manage entities
description: Refine and group the entities that matter using watchlists, entity resolution, and privileged user monitoring in Elastic Security entity analytics.
url: https://docs-v3-preview.elastic.dev/elastic/docs-content/pull/6796/solutions/security/advanced-entity-analytics/manage-entities
products:
  - Elastic Cloud Serverless
  - Elastic Security
applies_to:
  - Serverless Security projects: Generally available
  - Elastic Stack: Generally available
---

# Manage entities
Once [entity risk scoring](https://docs-v3-preview.elastic.dev/elastic/docs-content/pull/6796/solutions/security/advanced-entity-analytics/entity-risk-scoring) is running, you can refine which entities matter most and how they're grouped. These capabilities build on top of risk scoring: watchlist membership feeds the risk weighting, and entity resolution consolidates duplicate records and aggregates their scores.
- [Watchlists](https://docs-v3-preview.elastic.dev/elastic/docs-content/pull/6796/solutions/security/advanced-entity-analytics/watchlists): Define groups of important entities — such as executives or critical infrastructure hosts — and factor their membership into entity risk scoring.
- [Entity resolution](https://docs-v3-preview.elastic.dev/elastic/docs-content/pull/6796/solutions/security/advanced-entity-analytics/entity-resolution): Link multiple entity records that represent the same real-world identity and consolidate their risk scores into a single view.
- [Privileged user monitoring](https://docs-v3-preview.elastic.dev/elastic/docs-content/pull/6796/solutions/security/advanced-entity-analytics/privileged-user-monitoring): <applies-to>Elastic Stack: Removed in 9.4, Elastic Stack: Generally available in 9.3, Elastic Stack: Preview from 9.1 to 9.2</applies-to> Track the activity of users with elevated permissions. Replaced by watchlists.