...

To reset the two-factor for another user, have one of your Enterprise Administrators Admins go to the Account Info pane for the user (as above under Administrator Roles) and use the Disable button for Two-Factor Authentication (2FA). The user will then have to login and enable two-factor authentication again (using the menu in the top right corner where the name is displayed, select Profile and then under Two-Factor Authentication (2FA) use Enable).

...

Roles will be lost! When the two-factor authentication is disabled for a user (by any of the means above), all roles that user has is removed and has to be added back again by an Enterprise AdministratorAdmin. We recommend that you have at least two Enterprise Administrators Admins so one of you can reinstate the other if they need to reset their two-factor authentication. Having more than one Enterprise Administrator Admin is of course also a good idea for general operational redundancy.

...