you'd still have to get into his account in sandbox to pull it off