1. Navigate to Manage User Roles Settings
Go to M2 Admin Panel > System > User Roles 
2. Choose existing role or create new one
3. Set Role Resources
Find checkboxes for Login As Customer in "Role Resources" tab and check permissions you want to add to this role. Then save. 
