Valstorm Logo
ValstormDocs
Developer Platform•1 min read

Impersonation & Security

Impersonation allows administrators to temporarily act on behalf of another user for support and debugging purposes.

Security Controls

  • Permission-Based: Only users with the IMPERSONATE_USER permission can initiate this flow.
  • Audit Logging: Every impersonation event is logged and tracked.
  • Restricted Access: Impersonated tokens have limited scopes compared to original user tokens.

Usage

To impersonate a user, use the /auth/impersonate endpoint:

BASH
curl -X POST /auth/impersonate \ -H "Authorization: Bearer <admin_token>" \ -H "Content-Type: application/json" \ -d '{"target_user_id": "<user_id>"}'