Can admins or other users use impersonation to access encrypted fields? This article explains how Platform Encryption Module Access Policies help prevent impersonation-based access by default, what role limitations apply, and how the Impersonation setting controls whether encrypted data can be accessed through assumed permissions