Create an "admin like" role and don't give it perm...
# general
k
Create an "admin like" role and don't give it permissions to the things that trigger 2FA