[FR] Allow admins/owners to assume a user's role for support and provide owner view toggle (converted to project)

This issue has been converted to a project User impersonation

Feature Description

As an owner or admin, it would greatly improve operational support and troubleshooting if it was possible to assume the role of a regular user. This would allow staff to inspect the UI and permissions exactly as the user experiences them, making it easier to resolve issues or answer questions that arise.

Additionally, it would be very helpful if the primary owner of an instance could toggle between viewing only the repos they personally have access to and viewing all repos in the instance (full access). This would assist with management and support operations without compromising security.

Motivation and Context:

│ sourcebot [web] | 2026-01-29T00:46:24.931Z info: [health-check] health check                                                                                                                                                                                                                                                                       
│ sourcebot [backend] | 2026-01-29T00:46:25.229Z info: [user-permission-syncer:job:cmkyqhblz01yjn851oe7v40el] Syncing permissions for github account (id: cmkuuxooa000tn859gri6iddi) for user user@user.com...    
│ sourcebot [backend] | HEAD / - 401 with id BE48:913E4:1BEBA7:255F28:697AADE1 in 193ms                                                                                                                                                                                                                                                              │ sourcebot [backend] | 2026-01-29T00:46:25.423Z error: [github] Failed to fetch OAuth scopes for authenticated user. Unauthorized                                                                                                                                                                                                                  
│ sourcebot [backend] | HttpError: Unauthorized                                                                                                                                                                                                                                                                                                     
│ sourcebot [backend] |     at fetchWrapper (file:///app/node_modules/@octokit/core/node_modules/@octokit/request/dist-bundle/index.js:108:11)                                                                                                                                                                                                       
│ sourcebot [backend] |     at process.processTicksAndRejections (node:internal/process/task_queues:95:5)                                                                                                                                                                                                                                            
│ sourcebot [backend] |     at async getOAuthScopesForAuthenticatedUser (file:///app/packages/backend/dist/github.js:155:26)                                                                                                                                                                                                                         
│ sourcebot [backend] |     at async file:///app/packages/backend/dist/ee/accountPermissionSyncer.js:147:32                                                                                                                                                                                                                                          
│ sourcebot [backend] |     at async AccountPermissionSyncer.runJob (file:///app/packages/backend/dist/ee/accountPermissionSyncer.js:133:25)                                                                                                                                                                                                         
│ sourcebot [backend] |     at async /app/node_modules/bullmq/dist/cjs/classes/worker.js:517:32                                                                                                                                                                                                                                                      
│ sourcebot [backend] |     at async Worker.retryIfFailed (/app/node_modules/bullmq/dist/cjs/classes/worker.js:742:24)                                                                                                                                                                                                                              
│ sourcebot [backend] | 2026-01-29T00:46:25.443Z error: [user-permission-syncer:job:cmkyqhblz01yjn851oe7v40el] Account permission sync job failed for account (id: cmkuuxooa000tn859gri6iddi) for user user@user.com: Unauthorized

was observed in the logs of the deployment. Having this capability would allow me to understand from the users perspective what is going on.

Expected Outcomes:

• Admins/owners can "assume" a role/view of a specific end user
• Ability for primary owner to toggle between a personal-access view and organization-wide view
• Improved ability for support staff to troubleshoot user reports about access, permissions, and repo visibility
• Clearer understanding of permission errors and the impact of organization OAuth authentication flows

User Story

• As an admin, I want to temporarily assume the view/permissions of user@user.com to help troubleshoot their reported access issue
• As an owner, I want to quickly switch between "my repos" and "all repos" to distinguish my own access from overall instance capabilities