Audit Who Added or Deleted a User
Please Login to device's [Authentication/Log Setup] page to enable the "User and Audit Log" function.
After that,in the future,for any add/delete User log entries will now be logged,and also can be seen from the device's [View Event Log] page so that the admin user can understood who is the "ghost employee" if any.See the below as an example.
