I confirmed the new role does not need 2FA by logging into the ui with out putting in the code