Admins to be able to reset 2fa login

If someone changes phone numbers, admins to the clarity portal should be able to reset the 2fa so that the user can log back in again and reset it up. Also it would be useful to see the last login time a user logs into the portal so I can review user access and remove accordingly if they no longer use it and its not required.