906 votes180 comments · Azure Active Directory » Multi-factor Authentication · Flag idea as inappropriate… · Admin →
This feature is now on the roadmap. The MFA team is planning to adjust admin roles or create a new role that will allow delegation of MFA registration and credentials to an admin role.Anonymous supported this idea ·Anonymous commented
We need a solution for service desk to disable mfa without losing registered methods of authentication. so they can work on the users account or laptop. Then the ability to turn it back on. all this without being a Enterprise Admin. I cant even get the bypass to work. I have made the service desk people Privileged authentication administrator.