Need to analyse who has impersonated as me

[Vimal Priya]

Hi All,

Is there a way to identify who has impersonated as me in the instance and made the changes in SLA?

I am having Admin and elevated roles as well .I have not made any changes in SLA definition in last 10 days but there was a updates done for that sla in default update set .

Am pretty sure the updates have not done by me .

Please help me on this.

[German Alvarez2 · Accepted solution]

Hi

There are two ways, almost in my case.

1/ You can look at the logs, looking for "*impersonated" in the message

OR

2/ There is an event registered in the log register, also to track impersonations. --> http://instance.service-now.com/nav_to.do?uri=/sysevent_list.do%3Fsysparm_query%3DnameLIKEimpersona%...

In any case, If you are "admin", only other admins can impersonate as you.

I hope it would help you

[Shusovit]

Impersonation's are logged in the system log. You can see who was impersonated and by who, and when the impersonation ended.

Use this you will get an idea:

/syslog_list.do?sysparm_query=source%3DImpersonate

Please Hit ✅Correct, ��Helpful, or ��Like depending on the impact of the response

[Sampath8]

Hello VimalPriya,

Navigate to User Administration >> Logged in Users to get the list.

In the list check for the 'Session ID'.

Thanks,

Sampath.