I have a select few users that need to be able to impersonate users without worrying about the sn_hr_core.impersonateCheck property being set to true.
I haven't found a recommended way of bypassing that property aside from toggling it back and forth on demand, which is going to be too cumbersome for our team, has anyone found a way that works for them?
I've considered editing the OOB Security Attribute (instead of the 100+ ACLs) to account for users that explicitly have sn_hr_core.admin or are explicitly part of a very specific impersonator group of our creation; but we're trying to avoid editing OOB records as much as possible.
