You and your users play important roles in setting up 2-Step Verification (2SV). Your users can choose their 2SV method, or you can enforce a method for certain users or groups in your organization. User accounts created before December 2016 have 2SV on by default.
Let users turn on 2SV and use any verification method.
Sign in with a super administrator account to the Google Admin console. If you aren’t using a super administrator account, you can’t complete these steps.
Go to Menu and then Security > Authentication > 2-step verification.
(Optional) To apply the setting only to some users, at the side, select an organizational unit (often used for departments) or configuration group (advanced).
Check the Allow users to turn on 2-Step Verification box.
Select Enforcement and then Off.
Click Save. Or, you might click Override for an organizational unit.
To later restore the inherited value, click Inherit (or Unset for a group)
