Impersonation

Active sessions

Time-boxed operator impersonation grants. End a session early to revoke its audit window; expiry is enforced by the grant itself.