That's really invading privacy...you can do everything from the admin CP changing the persons avatar, passwords and everything. The only thing you can't do is read the private messages. That's probably what you want, in that case install the pm.php hack. But if you don't want your members to lose trust in you, you wont install it.