diff --git a/lib/NGCP/Panel.pm b/lib/NGCP/Panel.pm
index 71793bbae6..0eb7f65a39 100644
--- a/lib/NGCP/Panel.pm
+++ b/lib/NGCP/Panel.pm
@@ -123,6 +123,7 @@ __PACKAGE__->config(
         expires => 3600,
         cookie_secure => 1,
         cookie_name => 'ngcp-panel',
+        login_to_csc_session_expiry => 86400, #24 hours expiry for subscriber sessions created directly from Admin UI
     },
 
     'Plugin::Authentication' => {
diff --git a/lib/NGCP/Panel/Controller/Subscriber.pm b/lib/NGCP/Panel/Controller/Subscriber.pm
index 5381827b28..cf4fbda67f 100644
--- a/lib/NGCP/Panel/Controller/Subscriber.pm
+++ b/lib/NGCP/Panel/Controller/Subscriber.pm
@@ -3161,6 +3161,29 @@ sub edit_master :Chained('master') :PathPart('edit') :Args(0) :Does(ACL) :ACLDet
 
 }
 
+sub login_to_csc :Chained('master') :PathPart('login_to_csc') :Args(0) :Does(ACL) :ACLDetachTo('/denied_page') :AllowedRole(admin) :AllowedRole(reseller) :AllowedRole(ccareadmin) :AllowedRole(ccare) {
+    my ($self, $c) = @_;
+
+    $c->detach('/denied_page') if($c->user->read_only);
+
+    my $subscriber = $c->stash->{subscriber};
+    my $prov_subscriber = $subscriber->provisioning_voip_subscriber;
+
+    #create a new subscriber session and then store it to Redis
+    #realm and user are enough here, as user_tz and language will be automatically filled on redirection
+    my $subscriber_session = {};
+    $subscriber_session->{__user_realm} = 'subscriber';
+    $subscriber_session->{__user} = { $prov_subscriber->get_inflated_columns };
+    my $new_sid = $c->generate_session_id();
+    $c->store_session_data( "session:$new_sid" => $subscriber_session );
+    my $new_session_expiry = $c->_session_plugin_config->{login_to_csc_session_expiry} // 3600;
+    $c->store_session_data( "expires:$new_sid" => time + $new_session_expiry );
+    $c->response->cookies->{'ngcp-panel_subscriber'} = { 'value' => $new_sid };
+
+    #redirect to server's hostname
+    $c->res->redirect("https://" . $c->req->uri->host . "/");
+}
+
 sub order_pbx_items :Chained('master') :PathPart('orderpbxitems') :Args(0) :Does(ACL) :ACLDetachTo('/denied_page') :AllowedRole(admin) : AllowedRole(reseller) :AllowedRole(ccareadmin) :AllowedRole(ccare) :AllowedRole(subscriberadmin) {
     my ($self, $c) = @_;
 
diff --git a/share/templates/subscriber/master.tt b/share/templates/subscriber/master.tt
index 7d821f7a83..94fda4b6bc 100644
--- a/share/templates/subscriber/master.tt
+++ b/share/templates/subscriber/master.tt
@@ -54,6 +54,10 @@
                         END;
                     -%]
                     <a class="btn btn-primary btn-large" href="[% href %]"><i class="icon-edit"></i> [% c.loc('Edit') %]</a>
+                    [% IF (c.user.roles == "admin" || c.user.roles == "reseller" ||
+                           c.user.roles == "ccareadmin" || c.user.roles == "ccare") -%]
+                        <a class="btn btn-primary btn-large" href="[% c.uri_for_action('/subscriber/login_to_csc', [ subscriber.id ]) %]" target="_blank"><i class="icon-user"></i> [% c.loc('Login to CSC') %]</a>
+                    [% END -%]
                 [% END -%]
                 [% IF subscriber.contract.passreset_email_template -%]
                     <a class="btn btn-secondary btn-large" href="[% c.uri_for_action('/subscriber/reset_webpassword', [subscriber.id]) %]" data-confirm="Reset"><i class="icon-repeat"></i> [% c.loc('Reset Web Password') %]</a>