Designate at least two site admin accounts to manage users and MFA: Designate at least two site admin-level accounts (Site Administrator Creator or Site Administrator Explorer) that have permissions to manage users and MFA settings. This can help prevent admin access delays if another admin is locked out of the site.