Logging in on behalf of other users in the server version

Impersonation Settings allow the portal owner and full access administrators to log in to the portal on behalf of any user.

Enabling the impersonation feature

By default, this feature is disabled. If the owner wants to use it, it's necessary to enable the feature in the configuration file:

1. Open the /var/www/onlyoffice/WebStudio/web.appsettings.config file with a text editor.
2. Find the core.user.impersonate key.
3. Set the value to true and save the changes.
4. Restart the monoserve service:

   sudo service monoserve restart

After that, the Impersonation Settings section will appear in the portal settings. It will be available for the owner only.

Adjusting impersonation settings

Once the feature is enabled in the configuration file, the owner can adjust portal settings:

1. Enter your portal.
2. Click the icon in the right upper corner to open the 'Settings' section.
3. Switch to the Access Rights tab at the left-side panel, then go to the Impersonation Settings subsection.
4. Turn on the Enable Impersonation switcher. If you save the settings, only the owner will be able to log in to the portal on behalf of any user.
5. If you want to allow full access administrators to impersonate other users, go to the Access for Admins section and select the full access administrators who can use this feature.
   
   • Disable - to make this feature available for the owner only.
   • Enable for all admins - to make this feature available for the owner and all full access admins.
   • Limit to a list of admins - to make this feature available for the owner and the full access admins selected from the list. Click Add and choose the necessary full access admins.
6. If the feature is enabled for admins, the Restrict access section appears. It allows you to restrict logging in on behalf of certain users.
   • Allow Impersonation only within full admin’s own group - to restrict logging in on behalf of the users who do not belong to the full administrator's group.
   • Restrict access to users and groups - to restrict logging in on behalf of the users selected from the list. Click Add users or Add groups and choose the necessary users or groups.
   These restrictions are applied to full admins only. The owner can impersonate any user or admin regardless of the restrictions.
7. Click the Save button at the bottom of the section to make the parameters you set take effect.

Logging in on behalf of a user

Once the feature is enabled in the portal settings, the owner or full access admins can log in to the portal on behalf of a user.

1. Go to the People module.
2. Click the icon to the right of the necessary user.
3. Select the Login as User option from the menu.
4. In the confirmation window, click Yes.
5. You will be logged in under the selected user. To return to your account, use the Sign Out option.