Impersonate users / Show collections and secrets user has access to

To perform compliance checks, it may be helpful for Admins/Owners to partially impersonate users. Of course, private passwords of users remain private, but it would be really useful to see which shared secrets a user has access to.