You only need to reset two-factor authentication (2FA) for a user if the user is unable to log into iPayroll. If the user can log into iPayroll, they can reset their own 2FA.
Resetting 2FA essentially means removing the 2FA from the user's iPayroll account, and then setting it up again, either while the user is logged into iPayroll, or the next time the user logs into iPayroll.
If a user can't log into iPayroll, you will need to remove 2FA from their account on their behalf. The user will then set up their 2FA again on their next login.
If 2FA is optional for a user, you will need to disable two-factor authentication for a user.
If 2FA is compulsory for a user, you will need to to reset two-factor authentication for a user.