As a System Administrator, I want to enable 2FA as the default for our instance, while still having the ability to exclude certain user accounts, particularly those shared by volunteers with “Attendance Only” access roles (e.g., those who primarily scan in bed nights, meals, etc.) so that certain users do not have the same requirements to log into Clarity, while still maintaining a higher security level for most accounts.

Priority Level: 2