Go to the "Administration" - "User Switch Settings" menu to configure access control. Add users to the "Users Allowed to Switch" list to grant them access to the user switching functionality.

Click "Save" to grant access to selected users, or "Remove Access" to revoke permissions. Changes take effect immediately.

The module includes comprehensive security features to ensure safe and controlled user impersonation while maintaining system integrity.

Security measures include preventing nested impersonation, blocking public/portal user access, preventing self-switching, and maintaining secure session management with fallback protection.

Protected actions include:

No user has access by default - even system administrators must be explicitly added to the allowed users list. This ensures maximum security and prevents unauthorized access to the switching functionality.

The granular access control system allows administrators to precisely control which users can access the switching functionality, providing enterprise-level security.

To test the user switching functionality, first configure access control by adding users to the allowed list in Administration → User Switch Settings.

Verify that the switch user icon appears in the systray for authorized users and that switching works correctly with proper restoration functionality.

Important testing notes:

• No users have access by default - must be explicitly added
• Switch icon only appears for authorized users when not impersonating
• Back to Account icon only appears when impersonating
• Audit logs track all switching activities
• Nested impersonation is prevented