Impersonation
Super-admin support tool for acting as another user
Super admin only
Impersonation lets a platform super admin start a session as another user for support purposes. Every impersonation is recorded in the audit log.
Resource overview
POST
/api/users/{id}/impersonateSessionRole: Super AdminPOST
/api/impersonation/endSessionStart impersonating
POST
/api/users/{id}/impersonateSessionRole: Super AdminReplaces the current session's effective user with the target. The super-admin identity is preserved in the audit trail.
200
{ "success": true, "impersonating": { "id": "user-uuid", "email": "support@target.com" } }End impersonation
POST
/api/impersonation/endSessionRestores the original super-admin session. Callable while impersonating.
Impersonation must be ended manually. Sessions do not auto-revert. Build prominent UI cues so support staff don't accidentally take destructive actions as a tenant.