A holder of a valid integration credential may impersonate other users under specific conditions.
CWE-347