Setup -> user/roles -> two factor authentication roles