Backend consent-based user impersonation system