Enable 2fa on user only
The current set up has some users only able to see inventory but has no access to anything else on the admin portal. Is there a way to set up 2fa just for certain users and not the admin portal as a whole?
short answer: no.
the "AdminUI" is more valuable for an attacker so this always needs to be secured at at least the same level.