New User-Account (__telemetryuser) with PanOS 11.2.10

[HeinzP]

Following the update to PanOS 11.2.10, a new user account will automatically be created on Panorama and the gateways:
__telemetryuser

I could not find any information about this user. What is this user used for?

[ozheng]

hello @HeinzP 

users starting with the underscores are usually system accounts.

From the name, it is the user account used for the device telemetry.

Olivier

[BPry]

@HeinzP,

I either did not receive this new user in my own upgrades to 11.2.10 or I was allowed to remove it by loading a configuration file that doesn't include this user. Since I manage my devices programmatically I'm actually not positive if I just didn't get this user, or I was allowed to remove it and it isn't strictly required. Can you try just removing the user? 

[HeinzP]

I can confirm that it is possible to delete this user on the the panorama-server and on the gateways.
However, I still have no idea what this user was created for during the upgrade, or what might break if I remove it.

[BPry · Accepted solution]

@HeinzP,

I can just say that nothing has broken (noticeably) from removing this across a couple dozen devices. It's possible that it is preventing the collection of some new telemetry information, but it's removal hasn't caused any impact or alerting from the device itself. 

[jasonroy · Accepted solution]

The user is related to the Telemetry service found in Device - Setup - Telemetry.

However, in our experience, while the Telemetry service is disabled, but in moving from 11.1.10-h10 to 11.1.10-h12 this user was automatically created. We have verified that Telemetry is still disabled. As we have very rigid controls and don't allow undocumented/unneeded accounts to exist, we have deleted this account with no consequences.