Just for peace of mind and to minimize staff abuse, the system should notify the primary user when someone "login as" their ID.