Accounts are created by a Super Admin. Two-step login for admin users — enrolment is not built yet and is tracked as an open item.