MFA Require re-register MFA is greyed out even though PIM role of Auth Admin is active

Question

MFA "Require re-register multi-factor authenticator" is greyed out even though PIM role of Auth Admin is active

Answer 1

Thank You @JimmySalian-2011 and @JamesTran-MSFT

I was able to figure it out. The User had a PIM Admin role assigned and I do not have privileges to reset admin account MFA.

Thanks&Regards

Answer 2

Hi,

Please check the roles and permissions for MFA and can you also try with powershell module, sometimes the PIM takes time to come in effect and did you tired logging out and relogin?

Reset-MsolStrongAuthenticationMethodByUpn  -UserPrincipalName Mosesbinny@contoso.com  
   

reset-msolstrongauthenticationmethodbyupn

==
Please "Accept the answer" if the information helped you. This will help us and others in the community as well.

Answer 3

@Moses Binny Natta
Thank you for your post!

Please keep in mind that when you activate a role in PIM, the activation might not instantly propagate to all portals that require the privileged role. For more info. Adding onto what was shared by @JimmySalian-2011 , you can also leverage the Microsoft Graph REST API to individually reset/delete user authentication methods.

Additional Links:
Troubleshoot portal delay
Manage auth methods using PowerShell
Microsoft.Graph.Identity.SignIns - MS Graph PS

If you have any other questions, please let me know.
Thank you for your time and patience throughout this issue.

----------

Please remember to "Accept Answer" if any answer/reply helped, so that others in the community facing similar issues can easily find the solution.