Privileged Business Administrators

By default, a Business Administrator can change context to any person without a password. This is to allow administrators and programs to perform operations on behalf of another user.

A System Administrator can disable this system-wide security risk by running the following command: 

set system privilegedbusinessadmin off;

After this command has been run, Business Administrators need a password when changing context to another person. Only System Administrators can change context to any other person without a password. 

set system privilegedbusinessadmin on;