---
title: "Start impersonating a user"
method: POST
path: "/auth/impersonate"
tags: ["Auth"]
---

# Start impersonating a user

`POST /auth/impersonate`

## Request

- Base URL: `https://api.production.yourmedley.com`
- URL: `https://api.production.yourmedley.com/auth/impersonate`
- Auth: HTTP bearer

Admin-only. Start an impersonation session for a target user. Cannot impersonate other admins.

## Request body

- object
  - `targetUserId` string, uuid, required

## Response `200`

Impersonation session started

## Other responses

- `400`: Cannot impersonate admin users
- `403`: Not authorized
- `404`: Target user not found

---

[API](https://skmtc.dev/withmedley/apis/medley-api.md) - [All operations](https://skmtc.dev/withmedley/apis/medley-api/llms.txt) - [OpenAPI document](https://skmtc.dev/withmedley/apis/medley-api/revisions/40aaac5ca6bd?raw)