Impersonation

How services temporarily adopt a client's identity so access decisions use the client's token, not the service's.

The four impersonation levels -- Anonymous, Identification, Impersonation, and Delegation -- and when to use each.

How a client's identity flows through chains of local services via impersonation without amplifying authority.

How clients set the impersonation level when connecting to a service and choosing the minimum level needed.

How service developers impersonate a client connection so the thread operates under the client's identity.

How and when to call revert_to_self to clear an impersonation token and return to the service's own identity.

Using Anonymous impersonation to test whether a resource is publicly accessible without revealing caller identity.