This policy setting allows a process to assume the identity of any user and thus gain access to the resources that the user is authorized to access.