Separate from tenant sign-in. Two-factor authentication is required for sensitive platform actions.
Every admin action is recorded in the platform audit log.