topic Re: New User-Account (__telemetryuser) with PanOS 11.2.10 in Next-Generation Firewall Discussions

New User-Account (__telemetryuser) with PanOS 11.2.10

HeinzP — Fri, 14 Nov 2025 08:50:20 GMT

Following the update to PanOS 11.2.10, a new user account will automatically be created on Panorama and the gateways:
__telemetryuser

I could not find any information about this user. What is this user used for?

Re: New User-Account (__telemetryuser) with PanOS 11.2.10

ozheng — Mon, 17 Nov 2025 06:38:24 GMT

hello @HeinzP

users starting with the underscores are usually system accounts.

From the name, it is the user account used for the device telemetry.

Olivier

Re: New User-Account (__telemetryuser) with PanOS 11.2.10

BPry — Mon, 17 Nov 2025 16:07:27 GMT

@HeinzP,

I either did not receive this new user in my own upgrades to 11.2.10 or I was allowed to remove it by loading a configuration file that doesn't include this user. Since I manage my devices programmatically I'm actually not positive if I just didn't get this user, or I was allowed to remove it and it isn't strictly required. Can you try just removing the user?

Re: New User-Account (__telemetryuser) with PanOS 11.2.10

HeinzP — Mon, 17 Nov 2025 16:42:01 GMT

I can confirm that it is possible to delete this user on the the panorama-server and on the gateways.
However, I still have no idea what this user was created for during the upgrade, or what might break if I remove it.

Re: New User-Account (__telemetryuser) with PanOS 11.2.10

BPry — Mon, 17 Nov 2025 16:41:58 GMT

@HeinzP,

I can just say that nothing has broken (noticeably) from removing this across a couple dozen devices. It's possible that it is preventing the collection of some new telemetry information, but it's removal hasn't caused any impact or alerting from the device itself.

Re: New User-Account (__telemetryuser) with PanOS 11.2.10

jasonroy — Fri, 06 Feb 2026 19:09:59 GMT

The user is related to the Telemetry service found in Device - Setup - Telemetry.

However, in our experience, while the Telemetry service is disabled, but in moving from 11.1.10-h10 to 11.1.10-h12 this user was automatically created. We have verified that Telemetry is still disabled. As we have very rigid controls and don't allow undocumented/unneeded accounts to exist, we have deleted this account with no consequences.

Re: New User-Account (__telemetryuser) with PanOS 11.2.10

HeinzP — Thu, 19 Mar 2026 14:30:23 GMT

You can remove this user with no impact. However, if you reboot the firewall, it will be created automatically (at least in version 11.2.10-h4).

Re: New User-Account (__telemetryuser) with PanOS 11.2.10

jasonroy — Thu, 19 Mar 2026 21:49:33 GMT

Argh, you are correct, a reboot of 11.1.10-h12 also brings back __telemetryuser. I suspect because we run all HA we have not experienced this as we make sure our configs stay in sync and appears to keep this gremlin away once removed.