ImpersonationService_BeginImpersonation

Staging

https://stg-gateway.invora.app

POST

/api/v2/identity/impersonation/begin

Begin an impersonation session against the given target user. Returns
a Bearer access token the client should attach to every subsequent
request it makes "as" the target user.

Errors:

PERMISSION_DENIED: caller lacks Invora.Admin.Impersonate.

NOT_FOUND: target_user_id does not exist on the Zitadel instance.

FAILED_PRECONDITION: Zitadel returned unsupported_grant_type or
policy_violation (token-exchange / impersonation not enabled).

Request

Body Params application/jsonRequired

Examples

Responses

🟢200OK

application/json

Bodyapplication/json

🔴500Server Error

Request Example

Shell

JavaScript

Java

Swift

curl --location 'https://stg-gateway.invora.app/api/v2/identity/impersonation/begin' \
--header 'Content-Type: application/json' \
--data '{
    "targetUserId": "string",
    "targetOrgId": "string"
}'

Response Example

200 - Example 1

{
    "accessToken": "string",
    "expiresIn": 0,
    "tokenType": "string",
    "actorEmail": "string",
    "targetEmail": "string",
    "targetOrgId": "string"
}

Modified at 2026-06-11 18:59:10

ConnectedBusinessService_SuspendConnectedBusiness

ImpersonationService_EndImpersonation