The new policy gives admins more control over the security methods used in their domain, and increases the security of user accounts and associated data. Users affected by the new policy who have SMS/Voice as the only 2SV method on their account will not be able to add SMS or voice based codes as an option – either when enrolling in 2-Step Verification for the first time or later at myaccount.google.com. The policy is not enabled by default. Admin needs to explicitly choose to apply this policy on a group basis.”]