CREATE LOGIN AS ROLE

[bcook_1]

We have a multi-tenent setup in Jasperserver. I want to create a ROLE that will allow team members to access the MANAGE ==> ORGANIZATIONS, USERS so that they can login as some of our clients to troubleshoot issues. I would prefer to create a new ROLE for this as opposed to giving them all ROLE_ADMINISTRATOR. I created a new ROLE called ROLE_ASUSER and was able to condition the MAIN MENU to allow a user with this ROLE to see the MANAGE option from the screen. When the user selects USER or ORGANIZATION from the dropdown they get an Access Denied message. I have been running this through debug but having trouble finding exactly where this permission is set. Wondering if anyone may be able to point me in the right direction.