Can you limit Impersonator to specific users/groups as the target?

[robpickering]

I had someone ask me the other day if we could grant the Impersonator role to an account, but limit the users that could be Impersonated.   I know the Impersonator role prevents the impersonation of an account with the 'admin' role.   So, there's a check being done somewhere.   Anyone know if we can hook that check and add to it?   So we could perform a query based on the user and limit the "target" to specific users/groups?

[Desmo]

Hi Rob,

Can you share a sample of the condition script?

Thank you,

Charlie

[dubeyshivam]

Hi Dan,

I modified the queries based on my requirement for user that can be impersonated.It worked fine in UI15 whereas failed in UI 16 all users were seen in the list. Please help  

[NewUser5]

hey ,

where you modify your query? ui macro ?

i am trying to apply filters to the impersonated query in ui macro as i require the field vip=false to be checked when users is impersonated for it

this is my query

<j:set var="jvar_impersonate_query" value="QUERY:active=true^locked_out=false^web_service_access_only=false^ORweb_service_access_onlyISEMPTY^vip=false" />

This doent work. Can you please help me

[Dan_Berglin]

Hi,
I've no clue since I don't have this requirement any longer. There's two UI Macros named 'impersonate_dialog', could that be why? 

[NewUser5]

Hey ,

can you please tell me what needs to be changed in this.

I have a group whom i assign impersonator role and i want them to impersonate only a single group.