Hi! In my organization, we have set up policies that work this way: until you do not have MFA activated, you are just allowed to change password (the default one, see your profile) and activated the MFA in order to gain more access. So far, so good.
Once activated, from the web dashboard you can work with instances, buckets and other tools. The issue we are facing is to work from the CLI, although the credentials are validated to work with the CLI, the message that arises is that the user has not permission to perform that.
Our team could not track the problem, we suspect that from the CLI does not know or check for the already activated MFA, so the first policy is not being compliance.
Could you please help us somehow? We are running out of ideas
