Just about every user directory out there has the ability to monitor users. You can see who is currently logged in, what they are accessing, how long they have been logged in, kick them out of the system, etc
I propose that UIM should have this kind of functionality that is accessible by an admin level user or a user that has been given a "user administration" permission. This type of user would be able to change passwords, see who is currently logged in, boot people off of UIM/UMP, monitor users currently logged in, view logs for user activity, create users or modify an existing users permissions. etc.
I think this functionality should be accessible via USM and Admin Console.