Impersonation
Manage admin impersonation sessions for tenant support and debugging.
List tenant impersonation sessions
Returns the most recent impersonation sessions for the specified tenant, including approved, active, and terminated sessions. Use to audit support access history and ensure all impersonation activity is justified and documented.
Create impersonation session request
Creates a new admin impersonation session request for a tenant, targeting a specific user account. Requires admin password re-confirmation (current_password), a support ticket reference, and a stated reason. Scope determines the access level granted. Depending on platform configuration, the session may require a second admin to approve before a start_url is issued.
Approve impersonation request
Grants approval for a pending impersonation session request. The approving admin must be different from the requesting admin. Once approved, a time-limited start_url is generated for the requesting admin to use to enter the tenant workspace.
Terminate impersonation session
Immediately ends an active impersonation session, revoking the admin's access to the tenant workspace. The termination is recorded with timestamp and admin ID for audit. Use when a support session is no longer needed or if unauthorised access is suspected.
End active impersonation session
Ends the currently active impersonation session and returns the admin to their normal control-plane context. The impersonation session record is updated with a termination timestamp. Can be called by the impersonating admin at any time.