You do not have permission to verify whether a user has two-factor authentication enabled, for the following reason: