We currently have to search for the user in the admin console, log in as them, go to their personal settings, remove their existing method, then return to the admin console. If there was a button in the admin console to remove the existing 2FA without logging in as that person, it would be really handy