Hello,
This video provides the difference between users and the steps to enable Two Factor Authentication in AMP for Endpoints Console.
This is live on the portal
https://video.cisco.com/detail/videos/tac/video/6148140658001/accounts-and-enable-2-factor-authentication-in-amp?autoStart=true
And YouTube:
https://www.youtube.com/watch?v=2ILFocij5eU
Regards,