Skip to main content
POST
Start an impersonation session

Description

TenantUser. The target identifier may be either a TenantUser.id (preferred — supports roster-only rows without a linked User) or a User.id (UUID); both are resolved automatically. Denial reasons logged to AuditLogs.metadata.denialReason: caller_not_admin, self_impersonation, target_not_found, no_shared_workspace, target_is_admin.

Code Examples

Authorizations

Authorization
string
header
required

JWT Authorization header using the Bearer scheme. Format: "Bearer {token}"

Path Parameters

userId
string
required

TenantUser.id (preferred) or User.id (UUID) of the target

Response

Impersonation token issued

status
enum<string>
Available options:
success
message
string
data
object