Please create an ability to control access to tenants. Either by allowing an owner or admin to allow access for a period of time and then automatically reverts to blocking. Or the ability to allow access and then turn it off.
Additionally, the logging of such events. Who at Salesmsg did the impersonation, when, justification to do so, which account was impersonated, and what actions were taken.
These logs should be exportable and available for an extended period of time for auditing.