Ensure that users within groups holding AdministratorAccess policy have multi-factor authentication (MFA) tokens activated.