This screen opens a session on behalf of another account, so that you see MyZapp exactly as that person does: to reproduce a problem, check their rights or guide them.
Who can use it
The module is not active by default. Once it is activated, only the members of the Run as another user group can reach the screen. Administrators present when the module is activated are added to the group; later ones must be added by hand, from the groups screen.
A member of this group can take the identity of any active account, administrators included, and therefore effectively holds every right. Keep this group to trusted people, and remove the module when the need is over.
Open a session
- Open Administration, Users & access, then Run as.
- Search for the account by address or name.
- Click Connect.
A banner stays at the top of every page for as long as the session lasts.
You cannot target your own account or an account that is not active. From a session already opened on behalf of someone else, restore your identity first.
Return to your account
Click Restore my identity in the banner.
If the module was removed during the session, this button no longer works: log out, then log in again with your own account.
What you should know
- The start and the end of the session are written to the audit log, with your account and the target account.
- Everything you do during the session is recorded under the target account.
- You can reach everything this account can see, including the data of a restricted domain if it is a designated reader.