Hi Cynth,
Impersonating a user is useful for admins to test what it's like to be a user with a different set of permissions. For example: "Can this user access the edit button for web content?" Or "Does this user actually have wiki admin powers?" These things can be conveniently tested with the impersonation feature -- it's to help you set up your portal and test it better. For example, if you set up single-approver workflow in Kaleo, you can use impersonation to test that only admins can approve content, or something along those lines.
No data that isn't already accessible by the admin (which is already all data minus passwords, which are encrypted one-way) is additionally accessible by using the feature. So it isn't a privacy concern

Warm regards,
Sam
Please sign in to flag this as inappropriate.