our creative team has been using creative cloud (cc) applications via adobe id.we have recently on-boarded the same set of users to aem as federated id. however, as the same email is mapping to different id types for the applications - the login experience for using both aem and cc applications is n...

So as more users keep on getting on-boarded the only way to be keep adding impersonator for each user to the special user?Then we might have to look at creating a script/workflow to achieve this as suggested by @markus_bulla_adobe 

we have 15+ custom user groups with custom permissions defined in YAML.The users (power users/admin) want to impersonate everyone in the system. We had previously suggested to pick one user from each group and adding the impersonator manually to basically see what each group is able to see and acces...

Tried all the 3 things -1. The user who will impersonate has /home/users jcr:all permission2. User is added to admin group3. User is part of user-admin groupStill the impersonation doesn't happenorg.apache.sling.auth.core.impl.SlingAuthenticator handleLoginFailure:Unable to authenticate null: Impers...

@Sudheer_Sundalam- But admin is able to impersonate anyone so there should be a set of permissions that allow them to do that

Is it possible to assign permissions to custom group which can impersonate any user in AEM?We can individually assign impersonator per user but is there a way to assign a group or user privilege to impersonate anyone? We want to avoid giving this group/user administrator privilege/product profile.Wi...

I am able to restrict read access for various tools and options via netcentric @aanchal-sikka

This worked @Rohan_Garg! Thanks!

- path: /content/dam/collections permission: allow privileges: jcr:write,crx:replicate- path: /libs/dam/gui/content/reports permission: allow privileges: jcr:read- path: /libs/dam/gui/content/nav/tools/assets/assetreports permission: allow privileges: jcr:read- path: /libs/cq/core/content/nav/...