you could make one by creating an API that logs back the user in as the admin user, just like they logged in as the impersonated user.
For this to be secure, you can add the admin user ID in the impersonated user session (in the access token payload), and only allow switching from user -> admin, if the user's session contains this custom claim that points to an admin user ID.