In a Realm, we wish to grant ‘Impersonate’ access – however, is it possible to restrict the ‘Impersonate’ to select client(s) in the Realm?
Based on Google searches, the docs - this do not appear available as a feature (afaik).
Investigating if possible to manage via intersection of group (will post here if/when found a potential path)