Since Netsuite is deprecating SMS authentication for 2FA, is there a way for an individual user to switch from SMS to the authenticator app, or does the administrator need to manually reset every users 2FA settings?

Pretty sure users can reset their own 2FA settings from the settings portlet on their dashboard.