The ceiling always disables impersonate for principals in a tenant, so no tenant setting or grant lets them reach accounts beyond it.
The ceiling always disables impersonate for principals in a tenant, so no tenant setting or grant lets them reach accounts beyond it.