Disable 2FA from console for internal users

MarSal

I'm managing the company console with more than 100 users with 2FA enabled. Sometimes the user lose his phone or delete the recovery key and is not able to access his account anymore. When the user asks the TechSupport to remove 2FA to be able to access his account, support asks the user for the invoice, and it usually take one week for the support request to complete. It would be easyer for me to support my internal users removing 2fa from their account on my console when needed (maibe an email could warn the user).