---
title: "Control access with New Security permissions for multi-factor authentication (MFA)"
slug: "control-access-with-new-security-permissions-for-multi-factor-authentication-mfa"
tags: ["Area - Release Notes", "Role - All users", "Type - Commercial", "Type - Residential", "Focus - Construction", "Focus - Service Replacement"]
updated: 2026-07-11T01:06:51Z
published: 2026-07-11T01:06:51Z
canonical: "help.servicetitan.com/control-access-with-new-security-permissions-for-multi-factor-authentication-mfa"
stale: true
---

> ## Documentation Index
> Fetch the complete documentation index at: https://help.servicetitan.com/llms.txt
> Use this file to discover all available pages before exploring further.

# Control access with New Security permissions for multi-factor authentication (MFA)

This improvement adds new Security permissions for multi-factor authentication (MFA) so you can control who can view, edit, and receive notifications.

![Overview of employee permissions and security settings in ServiceTitan account management.](https://cdn.document360.io/961862ab-d0f2-4d91-bb62-a62ee8184eff/Images/Documentation/image16(2).png?sv=2026-02-06&spr=https&st=2026-11-13T00%3A07%3A24Z&se=2026-11-13T01%3A07%3A24Z&sr=c&sp=r&sig=VJvtyEbAA6kG7lsUZQEhSaYPaBfGU3tEXkKRlJFof%2B0%3D)

### What's changing?

Before, the *Manage MFA* permission controlled everything. It allowed viewing MFA status, editing settings, and receiving email alerts. Now, MFA access is Split into three separate permissions: View MFA, Edit MFA, and Receive MFA Notifications. All security-related permissions, including these, now live under a new Security category on the *Permissions* page. This gives you clearer control and helps reduce extra email alerts.

### Resources

- [Enable Multi-Factor Authentication for Identity Services](/v1/docs/enable-multi-factor-authentication-for-identity-services#enable-mfa-for-users)

### Before and After

#### Before (Current)

1. Go to the top toolbar and click **Settings**.
2. In the side panel, click **People > Employees**.
3. Edit an employee.
4. Select the *Permissions* tab.
5. You grant the *Allow Manage MFA* permission to a role.
6. That role can view MFA status, change settings, and receive notifications.
7. You cannot separate read-only access from editing or notifications.

**Impact:** Roles may have more access than needed. Some Administrators receive MFA emails they do not need.

#### After

1. Go to the top toolbar and click **Settings**.
2. In the side panel, click **People > Employees**.
3. Edit an employee.
4. You open the new **Security** category.
5. You select one or more permissions: View MFA, Edit MFA, or Receive MFA Notifications.
6. You assign only the access each role needs.

**Impact:** You follow least-privilege access. You reduce extra MFA email noise and avoid over-granting permissions.

### Who uses this feature

- All Business Types
- Administrators
- Region availability: All regions.

### 

---

### How it works for your industry

#### Residential Service and Replacement

- You give a manager View MFA access so they can check status without changing settings.
- You limit Edit MFA access to a small group of Administrators.
- You remove Receive MFA Notifications from roles that do not need email alerts.

#### Commercial Service and Replacement

- You assign View MFA to a compliance lead who needs read-only visibility.
- You grant Edit MFA only to senior Administrators.
- You control which roles receive MFA notification emails about number changes or resets.

#### Residential Construction

- You allow a project leader to view MFA status without giving editing rights.
- You centralize MFA changes under a single Administrator role.
- You reduce inbox clutter by limiting who receives MFA alerts.

#### Commercial Construction

- You separate security review duties from configuration duties using View MFA and Edit MFA.
- You keep notification emails limited to key security contacts.
- You manage all MFA permissions under the new Security category for clearer oversight.

### How to Prepare?

1. Review all roles that currently have the *Allow Manage MFA* permission.
2. Identify which roles need view-only access versus editing access.
3. Decide who should receive multi-factor authentication (MFA) notification emails.
4. Update your role settings in the Security category to match your access policy.
5. Confirm only authorized Administrators can change security-related permissions.

Split determines how much credit each technician is getting for the job. For example: If two technicians perform work on a job, the split could be an even 50%-50%, or it could be 75%-25% if the first technician did a bulk of the work. By default 100% of the technician split will go to the first technician assigned to the job.

[Learn more →](https://help.servicetitan.com/docs/servicetitan-glossary) · [See the full glossary →](https://help.servicetitan.com/docs/glossary-overview)