# Securing users on elasticsearch-oss **URL:** \ **Category:** Elasticsearch\ **Tags:** elastic-stack-security\ **Created:** [July 2, 2020, 9:09am UTC](https://discuss.elastic.co/t/securing-users-on-elasticsearch-oss/239599 "2020-07-02T09:09:38Z")\ **Posts on this page:** 4\ **Page:** 1
**Author:** ![thegreatpeepee](https://sea2.discourse-cdn.com/elastic/user_avatar/discuss.elastic.co/thegreatpeepee/32/71497_2.png) [@thegreatpeepee](https://discuss.elastic.co/u/thegreatpeepee)\ **Post date:** [July 2, 2020, 9:09am UTC](https://discuss.elastic.co/t/securing-users-on-elasticsearch-oss/239599/1 "2020-07-02T09:09:38Z")
I've combed the docs, but I can't figure out how to secure the default elastic (or any other users) using the elasticsearch-oss install (I'm using 7.6.1) According to [https://www.elastic.co/what-is/open-x-pack](https://www.elastic.co/what-is/open-x-pack), x-pack is available for the oss, version, but it's not bundled with it (even my modern version), and I can't install it either. Is there some other recommended way to secure users in the OSS install? Every thread and documentation just points to 'use x-pack'. ---
**Author:** ![Christian\_Dahlqvist](https://sea2.discourse-cdn.com/elastic/user_avatar/discuss.elastic.co/christian_dahlqvist/32/4617_2.png) [@Christian\_Dahlqvist](https://discuss.elastic.co/u/Christian_Dahlqvist)\ **Post date:** [July 2, 2020, 9:18am UTC](https://discuss.elastic.co/t/securing-users-on-elasticsearch-oss/239599/2 "2020-07-02T09:18:56Z")
X-Pack is not available for the oss distribution and there is no built in security. You need to switch to the default distribution or use some third party plugin to secure it. ---
**Author:** ![dadoonet](https://sea2.discourse-cdn.com/elastic/user_avatar/discuss.elastic.co/dadoonet/32/137187_2.png) [@dadoonet](https://discuss.elastic.co/u/dadoonet)\ **Post date:** [July 2, 2020, 9:26am UTC](https://discuss.elastic.co/t/securing-users-on-elasticsearch-oss/239599/3 "2020-07-02T09:26:38Z")
While the code for X-Pack is available in a public repository, [we do not claim that it is "Open Source"](https://www.elastic.co/fr/what-is/open-x-pack). See [Subscriptions](https://www.elastic.co/subscriptions) about the different features available. The default distribution of Elasticsearch includes all of X-Pack, but the default license is "basic". You can activate a free trial of the commercial features via Kibana (Management -\> License) or via [the API](https://www.elastic.co/guide/en/elastic-stack-overview/7.8/license-management.html). ---
**Author:** ![system](https://us1.discourse-cdn.com/elastic/original/3X/1/a/1ac57faf039f6b580b3f104ef42a2a89e41014de.png) [@system](https://discuss.elastic.co/u/system)\ **Post date:** [July 30, 2020, 9:26am UTC](https://discuss.elastic.co/t/securing-users-on-elasticsearch-oss/239599/4 "2020-07-30T09:26:44Z")
This topic was automatically closed 28 days after the last reply. New replies are no longer allowed.