As a security officer, I want staff accesses to cases logged even if those accesses occur while impersonating the doctor or patient.

I agree, if its not a proc it'll fail unexpectedly.