Thank your for posting your query on Microsoft Q&A. Seems like you have Azure AD/Office 365 free version of MFA, where following apply:
- You can use security defaults to prompt users for multi-factor authentication as needed but you don't have granular control of enabled users or scenarios, but it does provide that additional security step.
- Even when security defaults aren't used to enable multi-factor authentication for everyone, users assigned the Azure AD Global Administrator role can be configured to use multi-factor authentication. This feature of the free tier makes sure the critical administrator accounts are protected by multi-factor authentication.
Action to be done:
- Kindly work only on Migration of policy for Azure AD Global admins if its free one, you don't have to get the premium trials to disable it.
- If it does not allow you that means there are no policies set, so you may focus on SSPR policy. click Password reset > Authentication methods. The Mobile phone option in this policy allows either voice calls or SMS to be sent to a mobile phone. The Office phone option allows only voice calls.
- Set the status to under migration.
Let me know if you have any further queries.
Thanks,
Akshay Kaushik
Please "Accept the answer" (Yes/No), and share your feedback if the suggestion works as per your business need. This will help us and others in the community as well.