Restrict Impersonation based on the role or group or even by user

Badrinarayan — Mon, 05 Jan 2026 10:46:51 GMT

Restriction of impersonation to specific users can be implemented using a Script Include named "ImpersonateEvaluator".

This Script Include contains a function called canImpersonate:

canImpersonate: function(currentUser, impersonatedUser) { return true; }

currentUser: The user who is currently logged in
impersonatedUser: The user whom the current user is attempting to impersonate

If the function returns true, impersonation is allowed.
If it returns false, impersonation of that specific user is restricted.

This logic can be customized based on business requirements. For example, users belonging to a specific HR group can be prevented from being impersonated due to their access to sensitive information, which is the primary reason for this requirement.

Reach out to me for more information.

Thanks for reading,
Badrinarayan

Re: Restrict Impersonation based on the role or group or even by user

Dr Atul G- LNG — Mon, 05 Jan 2026 10:49:11 GMT

Please add a prefix such as Blog or Article so that readers can easily identify whether it’s a question, informational content, or knowledge-based material.

question Re: Restrict Impersonation based on the role or group or even by user in ITSM forum

Restrict Impersonation based on the role or group or even by user

Re: Restrict Impersonation based on the role or group or even by user