Impersonate User

The Impersonate User feature allows a Site Administrator to temporarily view the web app exactly as a specific user. This is useful for understanding what a user sees, checking access, or verifying configuration.

When Would Site Administrators Need to Impersonate Users?

This feature is commonly used to confirm configuration and access for newly onboarded users, review the experience of specific users in real time, validate permissions for internal teams, and ensure external vendors are set up correctly.

While impersonating, the Site Administrator sees the same interface, files, and configurations as the selected user so it allows the Site Administrator better help their users.

Actions Restricted During Impersonation

The impersonation session is strictly read-only. No changes can be made while impersonating another user.

Actions including opening or previewing files, downloading files, uploading files, deleting, moving, copying, or creating share links cannot be performed during an impersonation session.

Modifying site settings or configuration, and running automations, triggers, or sync operations are not permitted during an impersonation session.

During impersonation, the Site Administrator can view the same areas of the web application that the impersonated user can access, including folders, permissions, and configuration visible to that user.

How Can The Site Administrator Impersonate A User?

Site Administrators can impersonate any user by using the Impersonate User option from that user's details page. This action replaces the current Site Administrator's session with the selected user's session.

They are unable to modify existing files or settings, as the impersonation session is read-only. A clear banner appears at the top of every page to indicate that impersonation is active.

To end impersonation, log out and sign back in with your own account. This is the only way to return to your original session.

All impersonation activity is recorded in the API Logs with the Site Administrator’s identity for audit purposes.