Dynamics 365 2MT Episode 187: IMPERSONATE ANY D365 USER!!!

[@chadalthaus3866]

Insane tool!!! This is incredibly powerful for any consultant or system admin. No excuses now for skipping UAT and security validation. ❕ A tip from Ivan is that you only have a single environment open in your browser for the user dropdown to work properly. With more than one environment open, the users list shows empty.

[@JD-lx3cx]

This is great for testing. Do I need to install something? I cannot see that tiny button. Thank you.

[@edmarveras]

Doesn't open a security gap in the sense that a user may intentionally do something in the system to make it look like it was someone else? Are there any options to block that per user or per team?

[@ivanficko5046]

You can always check 'createdonbehalfby' field on every record to check if it's created with impersonate feature since it will be populated with the user who initiated the impersonated CRUD operation. Only users that have Act On Behalf Of Another User privilege can use the feature, otherwise they will get a huge error message.

[@BahmanTrialsAndTrails]

Does this still work if there crm users are in the active directory?

[@fodz0]

Amazing! Thanks.

[@patricetheriault8603]

Magic awesome!

[@ascala90]

Is it trackable? If i impersonate someone can they know i was in their account?

[@juansimon8737]

Great tip! Maybe you need Global Admin privileges to see the users.

[@ivanficko5046]

Everyone who has read permission for users can see the users dropdown. The only conditions for users to show up in the dropdown are: user needs to have at least one security role assigned to it, it need to be a licensed user and also not disabled.