@@ -69,6 +69,15 @@ final class AdManagerHeaderHandler implements AdsHeaderHandler
 */
 public function generateHttpHeaders(AdsSession $session)
 {
+// MOE:begin_strip
+// TODO: b/158447308 Use a new logger or context object for oauth errors
+// * Extract variables for `getOrFetchAccessToken()` and
+// `getOAuth2Credential()` calls.
+// * Make sure the new logger or context object log or contain
+// information about where the credential is loaded and which
+// tokens are used. Refresh tokens need to be redacted to
+// a 12-character length.
+// MOE:end_strip
 $httpHandler = new AdsGuzzleProxyHttpHandler($session);
 $httpHeaders = [
 'Authorization' => sprintf(
@@ -81,6 +90,16 @@ final class AdManagerHeaderHandler implements AdsHeaderHandler
 )
 )
 ];
+// MOE:begin_strip
+if ($session->isIcsUser()) {
+$httpHeaders['Is-Internal-User'] = 'true';
+$impersonatedUser = $session->getImpersonatedUser();
+if ($impersonatedUser !== null) {
+$httpHeaders['Impersonate-User'] = $impersonatedUser;
+}
+}
+
+// MOE:end_strip
 return $httpHeaders;
 }
 

@@ -33,6 +33,10 @@ final class AdManagerSession implements AdsSession
 private $oAuth2Credential;
 private $connectionSettings;
 private $soapSettings;
+// MOE:begin_strip
+private $isIcsUser;
+private $impersonatedUser;
+// MOE:end_strip
 private $soapLogger;
 private $reportDownloaderLogger;
 private $adsHeaderFormatter;
@@ -55,6 +59,10 @@ final class AdManagerSession implements AdsSession
 $this->connectionSettings = $builder->getConnectionSettings();
 $this->soapSettings = $builder->getSoapSettings();
 $this->adsHeaderFormatter = $builder->getAdsHeaderFormatter();
+// MOE:begin_strip
+$this->isIcsUser = $builder->isIcsUser();
+$this->impersonatedUser = $builder->getImpersonatedUser();
+// MOE:end_strip
 $this->soapLogger = $builder->getSoapLogger();
 $this->reportDownloaderLogger = $builder->getReportDownloaderLogger();
 }
@@ -110,6 +118,29 @@ final class AdManagerSession implements AdsSession
 {
 return $this->soapSettings;
 }
+// MOE:begin_strip
+/**
+* Whether this session represents a user with ICS access.
+*
+* @return boolean|null
+*/
+public function isIcsUser()
+{
+return $this->isIcsUser;
+}
+
+/**
+* Gets the email address of a Ad Manager user to impersonate.
+* This is `null` if API requests should be performed by the authenticated
+* user within the impersonated network.
+*
+* @return string|null
+*/
+public function getImpersonatedUser()
+{
+return $this->impersonatedUser;
+}
+// MOE:end_strip
 
 /**
 * @see AdsSession::getSoapLogger()

@@ -65,6 +65,10 @@ final class AdManagerSessionBuilder implements AdsBuilder
 private $oAuth2Credential;
 private $connectionSettings;
 private $soapSettings;
+// MOE:begin_strip
+private $isIcsUser;
+private $impersonatedUser;
+// MOE:end_strip
 
 private $soapLogger;
 private $reportDownloaderLogger;
@@ -230,6 +234,34 @@ final class AdManagerSessionBuilder implements AdsBuilder
 
 return $this;
 }
+// MOE:begin_strip
+/**
+* Allows the session to act as an ICS user for the specified network.
+*
+* @param string $networkCode
+* @return AdManagerSessionBuilder this builder
+*/
+public function asIcsUserForNetwork(string $networkCode)
+{
+$this->isIcsUser = true;
+
+return $this->withNetworkCode($networkCode);
+}
+
+/**
+* Impersonates the specified user.
+*
+* @param string $impersonatedUser the email address of the user to
+* impersonate
+* @return AdManagerSessionBuilder this builder
+*/
+public function asImpersonatedUser(string $impersonatedUser)
+{
+$this->impersonatedUser = $impersonatedUser;
+
+return $this;
+}
+// MOE:end_strip
 
 /**
 * Includes a PSR-3 compliant logger for logging SOAP calls. This is
@@ -290,6 +322,9 @@ final class AdManagerSessionBuilder implements AdsBuilder
 */
 public function defaultOptionals()
 {
+// MOE:begin_strip
+// TODO: b/158447308 Create a new logger or context object for debugging
+// MOE:end_strip
 if ($this->endpoint === null) {
 $this->endpoint = self::DEFAULT_ENDPOINT;
 }
@@ -362,6 +397,16 @@ final class AdManagerSessionBuilder implements AdsBuilder
 'Missing OAuth2 authentication credentials.'
 );
 }
+// MOE:begin_strip
+if (!$this->isIcsUser
+&& ($this->impersonatedUser !== null
+&& trim($this->impersonatedUser) !== '')) {
+throw new InvalidArgumentException(
+'To impersonate a user, you must authenticate as an internal '
+. 'user with the asIcsUserForNetwork() method.'
+);
+}
+// MOE:end_strip
 }
 
 /**
@@ -423,6 +468,28 @@ final class AdManagerSessionBuilder implements AdsBuilder
 {
 return $this->soapSettings;
 }
+// MOE:begin_strip
+
+/**
+* If ICS access is being used.
+*
+* @return boolean|null
+*/
+public function isIcsUser()
+{
+return $this->isIcsUser;
+}
+
+/**
+* Gets the email address of the impersonated user.
+*
+* @return string|null
+*/
+public function getImpersonatedUser()
+{
+return $this->impersonatedUser;
+}
+// MOE:end_strip
 
 /**
 * Gets the SOAP logger.

@@ -15,12 +15,12 @@
 * limitations under the License.
 */
 
-namespace Google\AdsApi\AdManager\Util\v202005;
+namespace Google\AdsApi\AdManager\Util\v202105;
 
 use DateTime;
 use DateTimeZone;
-use Google\AdsApi\AdManager\v202005\Date;
-use Google\AdsApi\AdManager\v202005\DateTime as AdManagerDateTime;
+use Google\AdsApi\AdManager\v202105\Date;
+use Google\AdsApi\AdManager\v202105\DateTime as AdManagerDateTime;
 
 /**
 * Static utility methods for working with Ad Manager `DateTime` objects.

@@ -15,9 +15,9 @@
 * limitations under the License.
 */
 
-namespace Google\AdsApi\AdManager\Util\v202005;
+namespace Google\AdsApi\AdManager\Util\v202105;
 
-use Google\AdsApi\AdManager\v202005\Date;
+use Google\AdsApi\AdManager\v202105\Date;
 
 /**
 * Static utility methods for working with Ad Manager `Date` objects.

@@ -15,7 +15,7 @@
 * limitations under the License.
 */
 
-namespace Google\AdsApi\AdManager\Util\v202005;
+namespace Google\AdsApi\AdManager\Util\v202105;
 
 use InvalidArgumentException;
 

@@ -15,21 +15,21 @@
 * limitations under the License.
 */
 
-namespace Google\AdsApi\AdManager\Util\v202005;
-
-use Google\AdsApi\AdManager\v202005\BooleanValue;
-use Google\AdsApi\AdManager\v202005\Date;
-use Google\AdsApi\AdManager\v202005\DateTime as AdManagerDateTime;
-use Google\AdsApi\AdManager\v202005\DateTimeValue;
-use Google\AdsApi\AdManager\v202005\DateValue;
-use Google\AdsApi\AdManager\v202005\NumberValue;
-use Google\AdsApi\AdManager\v202005\ResultSet;
-use Google\AdsApi\AdManager\v202005\Row;
-use Google\AdsApi\AdManager\v202005\SetValue;
-use Google\AdsApi\AdManager\v202005\Targeting;
-use Google\AdsApi\AdManager\v202005\TargetingValue;
-use Google\AdsApi\AdManager\v202005\TextValue;
-use Google\AdsApi\AdManager\v202005\Value;
+namespace Google\AdsApi\AdManager\Util\v202105;
+
+use Google\AdsApi\AdManager\v202105\BooleanValue;
+use Google\AdsApi\AdManager\v202105\Date;
+use Google\AdsApi\AdManager\v202105\DateTime as AdManagerDateTime;
+use Google\AdsApi\AdManager\v202105\DateTimeValue;
+use Google\AdsApi\AdManager\v202105\DateValue;
+use Google\AdsApi\AdManager\v202105\NumberValue;
+use Google\AdsApi\AdManager\v202105\ResultSet;
+use Google\AdsApi\AdManager\v202105\Row;
+use Google\AdsApi\AdManager\v202105\SetValue;
+use Google\AdsApi\AdManager\v202105\Targeting;
+use Google\AdsApi\AdManager\v202105\TargetingValue;
+use Google\AdsApi\AdManager\v202105\TextValue;
+use Google\AdsApi\AdManager\v202105\Value;
 use InvalidArgumentException;
 
 /**

@@ -15,14 +15,14 @@
 * limitations under the License.
 */
 
-namespace Google\AdsApi\AdManager\Util\v202005;
+namespace Google\AdsApi\AdManager\Util\v202105;
 
 use Google\AdsApi\Common\AdsGuzzleHttpClientFactory;
 use Google\AdsApi\Common\GuzzleHttpClientFactory;
 use Google\AdsApi\AdManager\AdManagerGuzzleLogMessageFormatterProvider;
 use Google\AdsApi\AdManager\AdManagerHeaderHandler;
-use Google\AdsApi\AdManager\v202005\ReportJobStatus;
-use Google\AdsApi\AdManager\v202005\ReportService;
+use Google\AdsApi\AdManager\v202105\ReportJobStatus;
+use Google\AdsApi\AdManager\v202105\ReportService;
 use GuzzleHttp\Client;
 use GuzzleHttp\RequestOptions;
 use Psr\Http\Message\StreamInterface;

@@ -15,10 +15,10 @@
 * limitations under the License.
 */
 
-namespace Google\AdsApi\AdManager\Util\v202005;
+namespace Google\AdsApi\AdManager\Util\v202105;
 
 use Google\AdsApi\Common\Util\MapEntries;
-use Google\AdsApi\AdManager\v202005\Statement;
+use Google\AdsApi\AdManager\v202105\Statement;
 use InvalidArgumentException;
 
 /**
@@ -102,7 +102,7 @@ class StatementBuilder
 $statement->setValues(
 MapEntries::fromAssociativeArray(
 $this->getBindVariableMap(),
-'Google\AdsApi\AdManager\v202005\String_ValueMapEntry'
+'Google\AdsApi\AdManager\v202105\String_ValueMapEntry'
 )
 );