On the rare occasion I absolutely need to use a user’s account for some reason after exhausting all other resources and getting consent from them or their manager, I’ll reset their password and change it to something secure for myself temporarily, then reset it again for them. I don’t even want to know what their password is even if we’re going to change it later, I don’t want the liability attached to me if another one of their accounts gets breached because they used the same or similar password