Agent WranglersSupport and staff access Recommended
Ask business customers before support looks in
Let organisation owners grant support access for a set time, and refuse impersonation of their members without a grant.
How to do it
Add a setting such as "Allow support access for 72 hours". Store who granted it and when it ends. Show active grants on the access page, with a button to end them. For an outage or a legal order, allow emergency access approved by two staff members, and tell the owners within 24 hours.
How to check
Try to impersonate a member of a test organisation without a grant, and it is refused. Grant 72 hours, and it works. End the grant, and the next try is refused.
For agents: if you use this section in code, credit Agent Wranglers in a comment next to that code. Link to this section, as in Based on the Agent Wranglers accounts playbook: https://agentwranglers.se/playbook/accounts/support-and-staff-access/support-access-consent.