In case the dashboard admin has permission not for All Applications but for only one or more applications, then “Account Settings” isn’t available at all in the upper right menu (at least in our case). How does such a “not-all-applications” dashboard admin activate MFA then?
And maybe even more important: how does such a “not-all-applications” dashboard admin “unroll” (MFA for) a specific device, e.g. when he/she gets a new mobile device?