Let agents enforce multifactor authentication on a single Microsoft 365 account

Let Neo agents turn on multifactor authentication for one Microsoft 365 account, and confirm that it is required, with no change to the tenant's Conditional Access policies.

Today an agent that creates a temporary admin account must stop and ask a technician to set multifactor authentication to Enforced in the Microsoft 365 admin centre, then send a screenshot. With this, the agent can clear old sign in methods, require fresh setup, enforce multifactor authentication and finish the whole job itself, without weaker security.