Define the group of users which will be required to enable MFA. You can either apply it to all users or specify user roles. Modifying this setting does not affect users who already have their timeout periods set.