Security wise it is a good thing being able to use an authenticator app. But it should be per user not per role.