Identifying when a Connected App with user impersonation is the correct approach for an embedding use case where the portal must enforce row-level security based on the authenticated portal user's identity