Tenant Impersonation
Impersonation lets superadmins "log in as" any tenant to see the platform from their perspective. Invaluable for customer support and debugging.
๐ง How to Useโ
- Go to
Admin โ Tenants โ [select tenant] - Click the Impersonate button
- You're now viewing the platform as that tenant's admin
- A yellow banner appears at the top: "You are impersonating [Tenant Name]"
- When done, click Stop Impersonating in the banner
- You return to your superadmin session
๐ Security Featuresโ
| Feature | Description |
|---|---|
| Auto-expiry | Impersonation sessions expire after 60 minutes |
| Audit logging | All impersonation start/stop events are logged |
| Session isolation | Your superadmin session is preserved and restored |
| No privilege escalation | Impersonation gives you the tenant's permissions, not superadmin inside tenant context |
| Force logout | You can force-logout from impersonation if the session gets stuck |
โ ๏ธ What You Can and Can't Doโ
โ Can Do While Impersonatingโ
- View the tenant dashboard
- See their products, campaigns, submissions
- See their settings, team, billing page
- View their public pages
- Basically everything the tenant admin can see
โ Cannot Do While Impersonatingโ
- Access the superadmin panel (
/admin/*) - Modify payment gateways
- Impersonate another tenant (must stop first)