What security role do I need to give someone that needs to assign MFA status for users?

In order to assign MFA status to users, you must have User_Account_Admin or SysAdmin_1 security role access.  To learn more about Multi-Factor Authentication, review this article here