Admins should be able to impersonate any user to assist with troubleshooting access issues and to help with coaching opportunities. Current state we are left juggling dozens of test accounts to trouble shoot and we have to fine tune those permissions every time.