Why is the firewall displaying "__telemetryuser" as one of the admin user when it is not configured?

Why is the user named "__telemetryuser" displayed when running "show admin local all" command and in "Administrators"?

• Next-Gen Firewalls
• Panorama
• Telemetry

1. The user "__telemetryuser" with "Device Administrator" role is added when Telemetry is enabled on the firewall.
2. The primary purpose of this user is to execute specific CLI commands to gather diagnostic data for the telemetry log bundle. Its sole function is to run these commands so the system can capture the resulting output.
3. Device Telemetry is a vital feature that securely transmits data regarding the firewall’s health, performance, and feature utilization. This anonymized data helps Palo Alto Networks to enhance their products and support services.
4. Administrators shouldn't remove or modify "__telemetryuser" account as it can affect telemetry collection. Even if the account is deleted, it will be recreated on the next device reboot/autocommit.
5. Telemetry can be enabled or disabled under GUI: Device > Setup > Management > Device Telemetry.

• In older versions (prior to the PAN-292447 update), the system used a hidden account named "_cliuser" instead.
• Unlike the new version, the old "_cliuser" was created and deleted on the fly for each task and never visible under Device > Administrators.