you can set up 2FA if that's what you're after? You mark specific roles as being 2FA (Netsuite actually enforce this for privileged roles)