Enforcing MFA by role (security policy)

Setting the policy

Go to the Security tab and toggle MFA requirements per role — for example, requiring it for admins but leaving it optional for staff.

Once required for a role, affected users must set up MFA before they can continue using their account.