Allows a user who can act on behalf of another user. Users should have at least one other role in addition to this one in ...