Allow group owners to disable 2FA for individual Enterprise users via API

As a follow up from Allow group owners to disable 2FA for individua... (#372401 - closed) to allow top-level group Owners to disable 2FA for individual Enterprise users of the group via API.