When enabled, a user device becomes active immediately after enrollment. Existing active devices are revoked.

When enabled, active tenant admins consume seats, are included in active user totals, and can enroll their own MFA device. Tenant admins can always manage enrollment for other users.

Existing users keep their own saved language until you edit that user.