Dr. Olivia
Dr. Olivia — Act-As (Impersonation)
Guide Home Release Notes

Act-As (Impersonation) Admin Only

Act-As lets a designated admin sign in and operate as another user. The chat experience runs as the target user (their courses, their summaries, their materials), but admin authorization, audit logs, and your personal settings still belong to your real account.

Why this is safe Two separate identities are tracked on every request: real and effective. Chat-side code uses the effective identity (so the tutor sees the right student); identity/admin-side code uses the real identity (so audit logs always attribute the action to the real admin). API keys and personal settings stay with the real user — the impersonated user never sees them.

When to Use It

Setting an Override

  1. Sign in as yourself (your normal admin account).
  2. Open My Settings from the gear icon.
  3. At the top of the dialog you'll see a red-bordered Act-As Override section.
  4. Enter the target's Canvas warehouse DimId (not the LMS user id). Look this up in the warehouse if you don't know it.
  5. Click Save All. Sign in again to apply.
  6. You're now operating as the target user. The header on every screen shows the Acting As User pill so it's never invisible — even on a screen share.
Screenshot: act-as-settings.png — My Settings dialog with the Act-As section visible (admin only).

Clearing an Override

Open My Settings, blank the field (or set it to 0), and Save All. The system writes a soft-clear row to TutorUserOverrides (Active=false, EffectiveDate=now) instead of deleting — so the audit history of when an admin started and stopped impersonating is permanent.

Behavior During an Act-As Session

SubsystemIdentity used
Chat / Tutor pipeline (prompts, materials, history)Effective (impersonated)
Image cache lookupsEffective (per-institution scope still applies)
USMLE/ExamSoft analyticsEffective (impersonated)
Canvas API callsEffective (impersonated)
Admin dashboard authorizationReal admin
Audit log attributionReal admin
My Settings / personal API keysReal admin
Post-session email (recipient)Real admin (so the impersonated student doesn't get bogus mail)
Global user learning summarySkipped entirely (don't pollute the student's profile)

What the Impersonated User Sees

Nothing. Act-As does not affect the target user's own sessions. They cannot see that they're being impersonated — the override exists only on the admin's session and is local to that admin's browser.