Impersonating other users in the server version

Enabling the impersonation feature

By default, this feature is disabled. If the owner wants to use it, the feature must be enabled in the configuration file:

1. Open the /var/www/onlyoffice/WebStudio/web.appsettings.config file with a text editor.
2. Find the core.user.impersonate key.
3. Set the value to true and save the changes.
4. Restart the monoserve service:

   sudo service monoserve restart

After that, the Impersonation Settings section will appear in the portal settings. It will be available to the owner only.

Adjusting impersonation settings

Once the feature is enabled in the configuration file, the owner can adjust the portal settings:

1. Sign in to your portal.
2. Click the icon in the upper-right corner to open the Settings section.
3. Select the Access Rights tab in the left-side panel, then go to the Impersonation Settings subsection.
4. Enable the Enable Impersonation toggle. If you save the settings, only the owner will be able to sign in to the portal on behalf of any user.
5. If you want to allow full-access administrators to impersonate other users, go to the Access for Admins section and select the full-access administrators who can use this feature.
   
   • Disable: to make this feature available to the owner only.
   • Enable for all admins: to make this feature available to the owner and all full-access administrators.
   • Limit to a list of admins: to make this feature available to the owner and the full-access administrators selected from the list. Click Add and select the full-access administrators you need.
6. If the feature is enabled for administrators, the Restrict access section appears. It allows you to restrict signing in on behalf of specific users.
   • Allow Impersonation only within full admin’s own group: to restrict signing in on behalf of the users who do not belong to the full administrator's group.
   • Restrict access to users and groups: to restrict signing in on behalf of the users selected from the list. Click Add users or Add groups and select the users or groups you need.
   These restrictions are applied to full-access administrators only. The owner can impersonate any user or administrator regardless of the restrictions.
7. Click Save at the bottom of the section to apply the parameters you set.

Logging in on behalf of a user

Once the feature is enabled in the portal settings, the owner or full-access administrators can sign in to the portal on behalf of a user.

1. Go to the People module.
2. Click the icon to the right of the user you need.
3. Select the Login as User option from the menu.
4. In the confirmation window, click Yes.
5. You will be signed in under the selected user. To return to your account, use the Sign Out option.