Security Auditing & Impersonation Manual

Target Role: Organization Admins

User impersonation allows Organization Admins to troubleshoot operational issues in context while maintaining strict audit logging.

Overview

Dream Center Connect provides user impersonation tools for administrative troubleshooting. To ensure complete security transparency and compliance, all impersonated sessions display a persistent Impersonation Banner and log every action to the immutable audit trail.

---

1. Impersonation Workflow

Activating User Impersonation

1. Log into the Admin Dashboard with Organization Admin credentials.
2. Navigate to Admin Panel > User Profiles.
3. Locate the target user and click Impersonate User.
4. The system switches your active session view to match the permissions and assigned location of the target user.

---

2. The Impersonation Banner

Security Audit Notice

While impersonating a user, a prominent Impersonation Banner remains visible at the top of every screen. This banner displays:

• The name and role of the user currently being impersonated.
• Your original Organization Admin credentials.
• A quick action button to Exit Impersonation.

---

3. Security Audit Logging

All actions taken during an impersonated session—including creating needs, updating constituent records, or reviewing shift logs—are recorded in the system audit log.

• Dual Identity Tracking: Every audit log entry records both the target user ID and the performing Organization Admin ID.
• Immutable Log Storage: Logs cannot be modified or deleted by local partner admins.
• Exporting Audit Trails: Admins can export audit logs via the Admin Panel.

---

4. Exiting Impersonation Mode

1. Click the Exit Impersonation button on the top Impersonation Banner.
2. The session immediately reverts to your primary Organization Admin profile and returns you to the Admin Dashboard.