The Open control on a tenant row has a chevron that lists every account in that company. Picking one opens the tenant with impersonation parameters that the app applies on landing — then strips from the URL so a refresh or a shared link does not silently carry the impersonation forward.
Also called: support impersonation · open as · see it from their side
- 1The picker links to the tenant with viewAs / viewAsRole / viewAsCrew / viewAsName / viewAsEmail parameters.
- 2On landing, the role context reads them, sets the impersonation, then rewrites the URL without the viewAs parameters.
- 3The role value is validated against the known role list and falls back to worker.
- 4The popover is portalled to the body with fixed positioning so a table's overflow or the viewport edge cannot clip it.
The comment names the constraint that forced the design: 'sessionStorage is host-scoped, so /platform on the apex can't write into the tenant subdomain's storage directly' — the URL is the only bridge across hosts. Stripping the parameters afterwards prevents an impersonation link being forwarded.
- Support could not reproduce a customer's exact view without their credentials.
- Impersonation state could not cross from the platform host to a tenant subdomain.
See it on your own jobs
Twenty minutes, your numbers, no slide deck. We’ll build one of your real buildings in front of you and send you the estimate link at the end — yours to keep either way.
or keep browsing features →