The ability to impersonate users in OnCampus is brilliant, but currently not usable at scale. The system currently grants a user with impersonation rights full control over almost anyone in the system. This requires admins to hand out the impersonator role with a very careful hand.

There are many other ideas in the Idea Bank, but they're all spread out, so I'm proposing a combination of things on one place with hopes it gathers enough steam to grab someone's attention(ahem, devs, ahem!)

• We need to be able to specify read only or read/write permissions for impersonation.
• We need granular control over what areas an impersonator has read and/or write access to when impersonating.
• We need granular control over who an impersonator can impersonate: by role, by membership, by name, by grade, etc.
  • We should be able to allow Teachers to impersonate their students but not others.
  • We should be able to allow Counselors to impersonate their students and parents (academic only, no financial).
  • We should be able to allow Student Billing to impersonate parents (financial only, no academic).
  • We should be able to allow Department Heads to impersonate their Department Members.
  • We should be able to allow Specific User A to impersonate Specific User B for a specifiable amount of time.
• We need to be able to impersonate in one window/tab while maintaining our own status in another.
• Impersonation needs to be strictly logged and reportable.
  • We need to be able to easily find who impersonated which user and when.
  • We need to be able to easily find all actions taken during an impersonation session. 

If anyone thinks of anything else, leave a comment and I'll come back and work it into the list above.