Skip to content

Commit acc3e14

Browse files
committed
Improve impersonation doc
1 parent 645ac5b commit acc3e14

File tree

1 file changed

+7
-1
lines changed

1 file changed

+7
-1
lines changed

en/includes/guides/authorization/user-impersonation/user-impersonation.md

Lines changed: 7 additions & 1 deletion
Original file line numberDiff line numberDiff line change
@@ -26,7 +26,7 @@ Follow the steps below to assign the right permissions to the impersonator.
2626

2727
4. Click **Update** to save the changes.
2828

29-
2. The impersonator also needs administrator permissions for the Console. If this user doesn't already have them,
29+
2. The impersonator also needs permissions to view users from the Console. If this user doesn't already have them,
3030

3131
1. On the {{product_name}} Console, go to **Console Settings**.
3232

@@ -119,6 +119,7 @@ Follow the steps below to assign the right permissions to the impersonator.
119119
3. Enter the user's username and assign the **Administrator** role.
120120
121121
4. Click **Add**.
122+
5.
122123
123124
### Step 3: Perform Impersonation
124125
@@ -200,6 +201,11 @@ To assign the role,
200201
201202
4. Click **Update** to save the changes.
202203
204+
!!! warning "Important"
205+
- When the Impersonator role is assigned to a user for a specific application, and that application is configured to support impersonation API resources, the user can impersonate any user within the organization. The impersonator can perform actions on behalf of the impersonated user within the permitted scope of that application.
206+
- To monitor and troubleshoot impersonation activities, you can use the {{product_name}} logs related to user impersonation. For more information, see [Access logs related to user impersonation](#access-logs-related-to-user-impersonation).
207+
- To notify users about impersonation events, you can configure email notifications. For details, see [Notify users on impersonation.](#notify-users-on-impersonation).
208+
203209
### Step 4: (Optional) Skip consent screens
204210
205211
Since the impersonator is pre-approved to access the application on behalf of another user, you can skip the login and logout consent prompts. To enable this:

0 commit comments

Comments
 (0)