Impersonated Users
The Impersonated Users object tracks users whose credentials or roles are used by simulators to perform actions as part of attack simulations. This is critical for validating privilege escalation, lateral movement, and identity-based attack scenarios.
Endpoints
/api/config/v1/accounts/{accountId}/impersonationUsers?details=<boolean>&deleted=<boolean>...
/api/config/v1/accounts/{accountId}/impersonationUsers
/api/config/v1/accounts/{accountId}/impersonationUsers/{id}
/api/config/v1/accounts/{accountId}/impersonationUsers/{id}
/api/config/v1/accounts/{accountId}/impersonationUsers/{id}/nodes
/api/config/v1/accounts/{accountId}/impersonationUsers/{id}/nodes
/api/config/v1/accounts/{accountId}/impersonationUsers/{id}/nodes/{targetId}
/api/config/v1/accounts/{accountId}/impersonationUsers/{id}/testConnection
/api/config/v1/accounts/{accountId}/impersonationUsers/testConnection
/api/config/v1/accounts/{accountId}/impersonationUsers/{id}?nodes=<boolean>