# The subscription link on Elastic website shows certain security features available with basic license but forum posts indicate otherwise. What's actually available with basic license?

**URL:** <https://discuss.elastic.co/t/the-subscription-link-on-elastic-website-shows-certain-security-features-available-with-basic-license-but-forum-posts-indicate-otherwise-whats-actually-available-with-basic-license/183819>\
**Category:** Kibana\
**Tags:** elastic-stack-security\
**Created:** [June 1, 2019, 10:19am UTC](https://discuss.elastic.co/t/the-subscription-link-on-elastic-website-shows-certain-security-features-available-with-basic-license-but-forum-posts-indicate-otherwise-whats-actually-available-with-basic-license/183819 "2019-06-01T10:19:36Z")\
**Posts on this page:** 3\
**Page:** 1

<div class="post-metadata">

**Author:** ![Mandeep\_Gulati](https://sea2.discourse-cdn.com/elastic/user_avatar/discuss.elastic.co/mandeep_gulati/32/40776_2.png) [@Mandeep\_Gulati](https://discuss.elastic.co/u/Mandeep_Gulati)\
**Post date:** [June 1, 2019, 10:19am UTC](https://discuss.elastic.co/t/the-subscription-link-on-elastic-website-shows-certain-security-features-available-with-basic-license-but-forum-posts-indicate-otherwise-whats-actually-available-with-basic-license/183819/1 "2019-06-01T10:19:36Z")

</div>

I have installed Elasticsearch via docker (version 6.5.4) not the oss image. As per my understanding it comes with a basic license. An API call to `/_xpack/license` shows this response

```
{
  "license" : {
    "status" : "active",
    "uid" : "aa2f181d-86ae-4101-b875-546bfe984ca1",
    "type" : "basic",
    "issue_date" : "2019-03-22T12:58:25.539Z",
    "issue_date_in_millis" : 1553259505539,
    "max_nodes" : 1000,
    "issued_to" : "my-elasticsearch-cluster",
    "issuer" : "elasticsearch",
    "start_date_in_millis" : -1
  }
}

```

Also, when I check the link [https://www.elastic.co/subscriptions](https://www.elastic.co/subscriptions) I can see that under Basic license, certain security features are marked as available

 ![image](https://us1.discourse-cdn.com/elastic/original/3X/1/c/1ca6d37b9c65a98ecb3f962ad6fec84e500f1b95.png)

But when I try to hit the API `GET /_xpack/security/role`, I get the response:

```
{
  "error": {
    "root_cause": [
      {
        "type": "security_exception",
        "reason": "current license is non-compliant for [security]",
        "license.expired.feature": "security"
      }
    ],
    "type": "security_exception",
    "reason": "current license is non-compliant for [security]",
    "license.expired.feature": "security"
  },
  "status": 403
}

```

Does this mean that security feature is not available with basic license? If yes, then is the subscription page providing inaccurate information or I didn't understand it properly? It would be great if anyone could clarify this.

---

<div class="post-metadata">

**Author:** ![Christian\_Dahlqvist](https://sea2.discourse-cdn.com/elastic/user_avatar/discuss.elastic.co/christian_dahlqvist/32/4617_2.png) [@Christian\_Dahlqvist](https://discuss.elastic.co/u/Christian_Dahlqvist)\
**Post date:** [June 1, 2019, 10:39am UTC](https://discuss.elastic.co/t/the-subscription-link-on-elastic-website-shows-certain-security-features-available-with-basic-license-but-forum-posts-indicate-otherwise-whats-actually-available-with-basic-license/183819/2 "2019-06-01T10:39:54Z")

</div>

Security was made available as part of the basic license in version 6.8 so you will need to upgrade to use it. The subscriptions page shows the state as of the latest version.

---

<div class="post-metadata">

**Author:** ![system](https://us1.discourse-cdn.com/elastic/original/3X/1/a/1ac57faf039f6b580b3f104ef42a2a89e41014de.png) [@system](https://discuss.elastic.co/u/system)\
**Post date:** [June 29, 2019, 10:40am UTC](https://discuss.elastic.co/t/the-subscription-link-on-elastic-website-shows-certain-security-features-available-with-basic-license-but-forum-posts-indicate-otherwise-whats-actually-available-with-basic-license/183819/3 "2019-06-29T10:40:01Z")

</div>

This topic was automatically closed 28 days after the last reply. New replies are no longer allowed.