Restrict Login as Customer Permissions

1. Navigate to Manage User Roles Settings

Go to M2 Admin Panel > System > User Roles

2. Choose existing role or create new one

3. Set Role Resources

Find checkboxes for Login As Customer in "Role Resources" tab and check permissions you want to add to this role. Then save.