View Categories

How to Configure Two-Factor Authentication at the Role Level

Article verified for Release 15.1 on October 20, 2025.

Two-factor authentication (2FA) is a crucial security measure that protects accounts from malicious login attempts. This article explains how to configure two-factor authentication at the role level.

Configuring 2FA on Role Level

To configure the 2FA on the role level:

  1. From the Users panel in the main menu, navigate to Roles and Permissions.
  2. Enter the desired role configuration by clicking the Edit icon.

  1. Enable the Two-factor authentication required on login option.

Once the feature is enabled, all users with the role affected by enabling said feature will be required to use 2FA during login or registration.

To learn how a candidate can log in using two-factor authentication (2FA), please refer to the following article.

Resetting Two-Factor Authentication (2FA)

If a user loses access to their authentication app or deletes their authentication account, they will no longer be able to access their account. In this situation, a user with the Administrator role can reset two-factor authentication (2FA) for the affected user.

To reset 2FA, the administrator must do the following:

  1. Navigate to Users.
  2. Locate and select the specific user.

  1. On the user information page, navigate to Two-factor authentication (2FA).
  2. Click Deactivate two-factor authentication.

Since 2FA is required for login, the user will be prompted to set it up again and will then be able to sign in to their account.

Useful resources:

Powered by BetterDocs