The SOX auditors need audibility of changes made to data by a user who is logged in as another user (login as user). Today it's hard to track. If you are facing the challenge or in the past, please upvote this idea. https://success.salesforce.com/ideaView?id=0873A0000003d7bQAA