Add new permission group Add new permissions: can enable tfa email can enable tfa totp can enable tfa authy